samba-winbind-4.15.7+git.376.dd43aca9ab2-150300.3.32.1 >  A bIp9|D7(t/DUiPg,w7jk_FOc=7֖'hKޏE<rHix2541>Jt04vwf|%7Kʢm<0-/йz"mA3+Kon|IJZ075e209b3386e0259f999ff49b117b96f4099da2858a5483053811d0a925651b905e7fed18769e10c6305c129c20da2828faa826abIp9|e9g`*gˆH_X)4J7RJbqu9̗1݌fta,`dH7BxCB2$e #Xe=t7|L swç `RGnߙb T[7(JTzz>  2r<'U"%~p%NѦG=MRMt4)ⶪ)ոia4Q;tl6@(qZ>pLN?Nd+ 9 Q *07),X z     P4xD9(:18:89> :N=A>A#?A+@A3BA;FAOGAdHAIAXBYBZB[B\B]B^CbEcEdF9eF>fFAlFCuFXvF wIxJ0yJtzMMMN N(N8N>NCsamba-winbind4.15.7+git.376.dd43aca9ab2150300.3.32.1Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.b sheep63SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<r9ȸ%s8G^큤큤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@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.7+git.376.dd43aca9ab2-150300.3.32.1.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(x86-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilslibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_X86_64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-libssamba-winbind-libs4.15.7+git.376.dd43aca9ab2-150300.3.32.13.0.4-14.6.0-14.0-15.2-14.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.14.3bascabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Update to version 4.15.3; (jsc#SLE-23329); + CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bso#13979); (bsc#1139519); + CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bso#14842); (bsc#1191227); - Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- The username map [script] advice from CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails; (bsc#1192849); (bso#14901).- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899);- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindsheep63 1652865292 4.15.7+git.376.dd43aca9ab2-150300.3.32.14.15.7+git.376.dd43aca9ab2-150300.3.32.14.15.7+git.376.dd43aca9ab2-150300.3.32.14.15.7+git.376.dd43aca9ab2 samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24194/SUSE_SLE-15-SP3_Update/c0ea892337fc5048773e39b4fa88f344-samba.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3b43e29cb71fcbbdaf61c5cb1ce8fdbece61359d, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=0c6a4445029879319a08f1625f1c3df39dc48698, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=05261f79b77db08129c0114c5658b88f69851797, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory5Q4RR2R9RsRR6R[RiRWRRR_R!RR4RaRcR]RoRRuR}RRRRRRRmRrR R3R8RZRnRhR`RtRRlRR\RbRR^RR1RR|R5RRVRR2RYR!R[RWR_RmR}RRRRRRRRRR RlRRRZR1R^R|RVRXRR2ReRURWRAR$RR?RR_RIR!RyRRYRsRRR4R]R7R6RRqRwRGRR{R;RcRR.RoRaRERRRRRRRR R*R}R0R[R(R R=RCRRiRQRPRORuRKRMRSR9R&RRRRRRRRkRgR,RmRNR RR#R'RRfRTRZRhRHR RrR R>R`RxRFR+R-RR:R)RlRbRRRJRBR@RzRjRRR^R%RdR/RpR\RtRLRRDRR8R3R1RnRRvR|R6,˿b`R~ DȊ_ /%JU਄x'1M7ΥmSAHu_W(8H6C*ddXy.ʣ}gvhAdtFkw5 ҁ7ty9$2Xpiq t&B#N+lX(]s,j :X% o=~ s mDK ZQXya_!#p`$o7k +yAк* қN |PPr5oݫiR@5odGzp/ M?, ֈeF@Jӥh"HWe,6_S?7-rQB[Q"sHdˁT;5_NVoznlj^ig}P~xq]^CLnk:@}NG3qؾ([͹:Bw<7yhM*6Vw؀Ic;!Rh=!lጚ o 7ek!?+!/%?saQLQL86|:$@T֮KF|VLS\d́W#Nw\ɆJth3,PH <[G /Ѳ )2v[<N`j/]aDnպCk{G=YKcH}Д{(㐠1cͺ27;={*!ߘ<͐T[}k!QW1ųd UG#onk`g҇P\KW@sIҼ|!yCgT7>Cko:D-b>7;ܤ7JhbjjG '0)b^v<$B b+**\+?:ǜ:HO4@}&0ąZRowxӬ`+<,Q%izŔk? "hoK +adIFU-aMN38BIdq^ &,4@}}&UزVW^)>;^XÀ k-J|a =005Jb3}1>ؐ c"ͤ]&&=:6Ktַ/f RGПtmDm΁+vҴ+JHcâQ[T7m|DH]>"KH/!,'5PKD)u/&_ѯ';\h:h&Ρ|zBo s]9,+nucA&}K&I =@Iw;a}UaipQd#:bYNLZ9Vt/,bY%P6(] La GοbΪ`[-(JS(i۶0 p/hhz=G-ǝ2zّ1f&Ԛ7JõyG $D'cw]=G([9GOT)[kFy\n*zCيiEIqڍ֨o k M0ZdՠmD6~ ҏXV\ɒϐ:!Xп,/'IEfDŽK6Ҁ! >~DZ )Gif~B!Ѓn7krE8%[|v_F{eAa=qfMf v'VPټL1E?mlNHe;iK v=u!BlA2Di4U&íUI>,'BcN"A`C*xI=\H\8_o<9zHa$]<||ڞ1glh2:x,+e`I'aqu̗pI,$_5\5qD{%^h}Hs/M, =ǕXuWs|Hw 0̣sβyn܂Mw*%"xeF_n+OjE%c}^"&qBﮌzr)jٲ}J(v#6nKA=яH!"i%ce.x"h`H|\-۫&2`gp%jk<ـ5qOY!ra""Ư$2-~)#-tsU~ 2aȇ9#jx(ҙȆQf0!7PԗfoN1>Lg8s{f\2gy}FuVW4i]~UfKQ|rwKipdQ8.')%~.;1c6{}ǃ;TB0~:UD6l!/W/ro&mU@}u(u˄۰} xqXuN})kp?Y5Wo!};:ħӢ^:0CciGyPKZ|ܢV~=wFwx-oBTթ2V 4eE5FU=Eyx ~D0 y XpTX; 6!J-왂R[Z icbeqfpO@XclSx@(cV/\ 玏dpƴ G_/<ݵeF:1Vܤ<ՏazEJx"/aOdt@~10^!|qGX}wb!uI8ƽac 5vZ\\`3i$u~ʿ%NSlʑ7l{dAZaيclɀ6;D@6ާÂı+ڄ؀yUQZy_ZؖJ2rc ױ$GR} M@жTSb!Ol.55z|a&>|<\ʟ.*B)ܲH W q;8n REPaK 蔫!W (_lpp\W8G"{nJl,5 S(L#I̩)(u7 !¼)zO˽ vWn)\ 6=V*Sh>57^Q=<)"H2B(@/X/-ӹgy'vugR{JEK &0*7KY͡th=&!lc8^qP!}yn\:7SX>:8<}$ W2w7'E3T_ۡ%7&B׆2}|b] ep,{KY +kX5yJ_RL_*C/kl@(Wŕ'a l\o {^5? Iƥe؁bNfйqTe(7E(i1t͐WO0D;x (R墑Luvx L {wa*|"QG h76a##(9BS(2x)!'4Y,W4,ubfYK&>^Rs*(Պ M;Sܺs j]g/#M #s.bDhk0!\K;Uݕ70"] Bӈ=fP c~I z% APʰRq~R_ڟ s^W4Turí0Ar|]Pm\R|(q[BǺXg3<:b8и+3\d@,C6̟"nFC\*Sʪ&-vۑZ#RUdqT'xo~ ,FCeAevF!infeBYW+@SbET<4zmD1q,;3Gw`>{* Un8bLh>H%6:41|n[-[o{IV,HUJ1<vEf=i1՘< quQM5gֺ%C} ͼ:"G#YT6<IQ'lGM|݀WhI{2QwUciP!r;`TW|!Sӄٿ{ːr* l׽F(*x?9O$s;?#BrzdBrPFfsf²ETT;Zp x=-^5΢ۮ8qʥ) b,ԕWnQ^KDI‹2B mՉ2HyGY[+"ݜۖ5'gfӟ9z;jAcjOKobL5efFroG~o]D+S{U;3X{{ud )o1ntGP\  Zt U/ ,hH\?z Tq4VPTS9X Um%T3J1b`chw0jngǓdШ8 K Tڌ9i<5S)f{jА_q)ߥ/ꠘ1ni'r3I:Ff(R1)|hnA/%Jgޯe͒S)& sl8m|Bs0e2w䀳%{ fޥK5̱ w>3߭^Q#2FNSƑ>I$wxͦyg*fj:yJe0/qxrڬb"p AbMZDQ̊4ħͱ6~!.$rSbڸ[ٖn"EC4wzTݴcW_ϣz 3CyCIqrW=1#&TCRJ׆(aGH+"˾J@aGO3➼##a{K4mDIԢ6I*h-X ªegؠ5R]UߑM~͐m;YcA'1RaZo.B@v,2Gw A!/@1%li5!>MJZqzZ?'%7/~_Hz@-밥gZٸznފԜDץe;uh6w H0z =#q r1,K7ܪzy?^#k~iZFFSSJ âzIϥElŴ>kwu;_tɤ}x)D\+Sas;1푍bA mQV@6?X?2C]ugVE &O*8Ԅ>c_[duGuq> FFFod]&Okf+&lw컩lVt%L3zҺ83"AAz72VxS%\ÞA7P`(Pe.~G38jc /S <@FnlSh@K_H)JW.V 3 t5 dVQj!rಜ7AK󘰳nʐ!-m% ^UyD ҅c(G^ oInvJfXf,Aɐ X @ߟֲys':&uVe6+eȢSJ&)z G/J Te8d=+BD6S@T"t=tz-S 8?Qxh`r2vy{7^vT'M@kq؇]EP,\r\qo\pw/Ȁ3 e?H?#~T [6@C$VH+4֐$ (!7OjuBq1+J#ܦ4uGl tRpUn П+BYj<+omKZ;G G(p\rO%WWڼe6_ gSֵ舀8ݺJw0 k8tmt0kI W2P`mt(l1X13c_  v@zz}$YsmQH|s;ŗ8+DJFTB ӵtt !b|u lO0{70W"iPytA>pL4$ Y0CEV6q_ ­UQl5YVIl a +J-zEklӜ۱\f݄zQ>=㪢ZD!FJGJXAf 㟴sXGW*dBȷ~*t "L,$F*ǘO+l2='GEpqpɰ3=KOLĆLn q{fOo16zy>1VaJ~!䏦f~ƕzw$uQػf۟v*3on:3 `Rҫsy]$z@3ƫ>Gͱ E)I EMQ@!d:i49_%~`+Ou_rW^sgٜ_xu5G1hP`Byqݭ,٘Qj;]j#C@*^/&o}Ggp )0H - A%1Wn޷7^7Q=.C0{$Xӭ/o(Ic: "Px@}950faҙ\N_ֺ3^ E7Lb'Sdԁk$sQ:M AlVVϝI2V7ĽHj.+a Z)uc*%l?[ONECwt1be ˆ 5 "u.NmoZI1k[5̔䍰?0,`Sfԧu߽n_<& Yy!olbnEVVP$GI/Y$V WPa 1 嬟do,2-FvFKzMiR*N_pb-,W$$L e\7ȼ~NUٶ`z1 satEss}ԧp׮հGZbvYpZ &Vj׷ࣁk:2UsBA㿳J{2}!朕]^Rߒ@,qłZEwjЖXZK6] Dh*T>̗Ü^Ɨ%@u%sAs"o1BS:nr|!ύhBqj`c!.9/~_d+9+M6~da^kVM8,5kw\s/2FF]]tר+R CWvN]N"DB_PBPĤZgT q. a""jy5Y 1ZĠa*9 CߨT1!A-kw?Pec'0/ @ ; ?@BSzq$#.[|5SRѦ/9TxfHF-^F+r͕/$=čAGD.cgɼ Bѭʾd#;K/N6%U?X|'`Pڇhz(GnIIv\c<^hES e1ܵ:?ihwc!.u"34shB|g%JTrSD}^8ǘd+oګMJuPrMF+{An~$vZۇoRƬ!9kpUi!?t`ސYN8lߥq%y4'Kot -I)ْ'[+5hx,<6og@11} h2`}FtI!rpȫ" &k1c;H`ָT~uOpmHjXa)m%}f>/,!)Bs@= ՋH3C)v͖v| Z>]wCnF hSr6Ϥ shd}y--Ƅg-7,]`yu /.60R1FjJ* UJ8x7Dg<)!9}MO3RṭE;gC 4wj>Y"R0ǹ~n!ڕYkmߠ.ڐ;ˠ$Tf1yqZ s.z+$ԭ۰݈hyo io [ըjK%tryy:`96Qɑc"}e_u;oYSec'BjF< ?s6uK]1``Ȩyb?.ݖO̥ om5"r͖cAm'N? z",.V.\ se*(C^, zTahU8:6`7H`|_xr3C\`kκpHX_)!P6q.z@m/]ZmB^BqQ\lA3 &ǞA'"@HR\# N3F#,σ< հwޒS3mev╙ÑRzy]S4M}dl㲛{_!"XHIMg)Ъ9I4d= k{(|߾QXY :xf^X_ꠏW)7lpDխpn>DŽEALu'p}Kdj4)$H>c 0HeZ/D_Js3iXXV|͉om>P< JﳈZx]ނ*P̈dt J)_(1Rޯ0 ]I^Tap6sbM(R2jK&Y,XB57=cٷNϐDY$?g{ Zּ& (Arw:&tC4.H͚5j*]]E1_g2>;L0Vw-Ԟt!dQW|s '4SBuPk#=V!T}g% ödbdϻ^ `L,:4bXW"Rv<* c.蹣IؕF2q;.ϳbfv*QdO3QEzƜګ磁U~Mz Q㝅eՆ L-L.7G:8B~4oiuc!`]ET_3ͧ6> y~.6ؿ^h慸f*@AX8רNlP:]j>q=iߖb h-44 7]sB+a|?sknJ_qf0z|?7 kf}غA1D-CmSMhBׯƷӔIao/8a= BbMH<͉W-LQ +ksFsAV6.8\~1OȹlȲ@QlˇnLXnSebc \qKp<2at(TFǼ c_a_2%F^^Cne[׿7p5>,/M aڝ,Ҭ[M{nl̝@SX 4wXTYP ƟM/NUp!Xe  QHCV(FԂt2ic>sg?&Kj*.Z).?B,, /TtrA/ 'ʔ&ZPJm]y;q0H3E0r9S^^xW0d9z{)rk9{(SB*|M'+BM!U*z5忯X>;Z%st;c67/烈*uI ZyAdI#&K]#SDEf7?O: +Mn3^ _$Pdxq@,Itx% p'~ +*|.xK27s崬j0#!4r8fF$h=$U=°wO`0Zyhc܎'e0^A}i1/>b x8Tj|k;x6ۊa:m\H8x|ɾ{zf^LN|a+v5_fWk/;<_x풟B6y{]n&8TIlΦ 4WyOl1Rx F]$4GF#x0gMףNIPQLf@PI4P1qW6 M1' u˭Ж\wHh.[$;Ã[Ky ޮU(IDV[~&ּPWTP z4]@yCAhjmQ݌Y'$n etC[ 7y߈|ܔ<u hQ<1iûhzOy2:An_Ķ z1k@-< p\A2NDٱZoB!롾:zElJ3Noy:@eU +͵6Eg꒖2tW !ۉ2aU_,+H}n1 ~kѮeXuΉm;0\K64Ze´LWAˣ:.@YԗZP䗢Kjmx29PgHa~% @ttܒ1;o\Y!~RIJT8ugHIca <ΦD7z)jhs7%jgedw8f!{mqxiS 64>F{gqOzf .)U{6~1~q\C`\7NLCL-UU].1SX N BYeW.~<~%8*88ecRΐߏ8&9g9H`Ôa4kD6Z2ej*mc$/u~[ ]$#rQu:rH̴vNd};m)f-H\7> )[1a9 U8JPR^Ԇ_lnU;~j~K(Fk(\2 yKѩ} >3̈^D'ڷ|rֿe{ }A8KJ `VaS9ȝ3/ʹ.;VlJ#lS; ?\LֻɃ9:2'QNO~|&[LO>V: t ^l( K"c!#ԕюGZX|(P|G V` u]F"i(1xm:2ERyFZ=n_`͛K]adT2&-os!9ZvL))tSxCP(N(>?I7g \^7SbMMpe)Z7qЂj"%XG]Yf<# Iưo]BHL#[6?NTF&!,+P1^^3_^MAb˺г %M $p:nܺ'yO ћ}u9ͨ uG[GJ_hl!K3l?ܘw=tchOқ';`F{~8YJfh HOOBQfL#^\}&\8 ev'0t|-; _cJDv%e0^',R abG5/idWwcZ3HM39'Hߘ!-H2͸REм|6ߗ].Ы)1Wc?yJ gYjqӸH @80g iʥMO*oa3$i<2r33~= MSbB!J !~y+66*"8ZdټA>>d#eATjyfb$֐)k߃z#H t+`tZih-ͫӡ8^ѶM ˾ ̹S@+*[T #t!/ 6IH+9N~j|@ƃiX[#'y'H!U\-= Z\ciδj'Hs@ LKSV!g(~p6"1ܔW([4}Y ab HgL~[Hym U>`#e܄`ɓׂq {Q W<%Ld>8uD'xWn"% ^0 ,U H$7r#Sux G=iEia/!qfysR[T)~q.LdIu À4$ 3ZNmm'c.E)lzߓVI?*eDz^ R噀-?S ;P`LS6ĽmKWidCg"(*+Y(5iZ } ,8$!b4EaI4I'oJ@+ZRVc<Cu쀵Rմ> Ey:$EY6SB? C?P v^mϱ-؜իS %7ɸg>QyNc wY4`4;5&֓sdy6]<;-;N6\Hn]U7q24$4TrMkRzTxS%(*~sLfj[?˃ M[+ITxq?sP윿vDWeQ"yKSQ)…7`}ZN2 PjUUp)΍1_ܻ#@+N߶y ~Ni(N:ËϤˮOv)q\ nz(SvvgKg<{97p*R9D ޒW_gAb)ȑ&G^gŇzힺ%oՏx2;b֝vZI8Ȥ_5wp:ͽ^ j9?O/DbflXl#$9 2@l]Owdb`9XQo*8T=Lq`VN}bҘgJA*>@-&*h*v8˄7#/.2=SuicHlbB3?P URqph/B@ $ݷcA]S'KpuyWeM>ݕT@iXZPœ`mIm+^İǑ`nI3N16E2Lu<2x1u5TBr]~.{E% 6j-\Zy?mD 50)m Ϟ|iב-]'ŻYp#q>xqPlot TJĬ)=28Y=ڪvptDȃ.cxYs.$Ih'N.RW\Zڤ`V( (Dؽ>~ 5*y'u_R%a؞TQv0Hm&(80)Jeޑ#B I0vz2/}% zǢ/=JFʁW^cWv>AldBoS~Q%DqڡB"y"dž1IS7<KI?z׸Ӑ7ǃ^ MeAW! f4TwY $&$ z;sC0&Y!/'[jaZfrwӣZ?l\m9.ef.3E-J@^pY̠Ie_5w,{N} 5kF21 =uAh)  a۝Bvu]~ym(G".zn;M$tABM$Y~gB"skfe ">l؜Xi 60!D1)&2gf:2ҳOmA VNՈdԣEwBpn~AkU).Ʃ$ ky651Ϣek79e e i s*65_8|@/[|x`XiwǫG,¹0Z*!:M9.=E}%+ju֜?Dz<)RAqH.6Wu兦&ٛtچ#,ގꖤdc>syo"Dڒ씠QʟqVk ?~֒d}ջWg'ҍY"$rvOb&¨oE*a`9-^B4|!B~F uYZǮ>vAzϜgلQUcW@c4y}{ްֿimptS W/[J3U U^/OLUP#y NKnJF<qQ Lm=Hn-kk^/q6~4d>;@ٽ~%^? ],6n tBg*oO*k5fhP$ kZoO$M. V"$j)&0)9/#=O⥆ZA6{gXn I%o 0HXv[ OX`bG#3w@[օgBp]яNwŝc6 b^ޤ 0Ԇ^}ϯ?}-A&:zAAz3$4ˤEאІ 5r*05| 8jX81GLXvs8MXiطrQo`t "IeڸgCsּk?|!5h8Hv9/7gH& \P{Q=I$]'k/L?aJ@BШe>e/;ǖ?{'n=#MCu<{~m* Eu18cJ),{'L:Xfɤo6emya(o6;w}OFV9C}2 5ngEGn͍_ )>+']Ex~1ݺ09BU綯Aܼ8=$BO9< "ʊW+G|T=cNwJy4,gz׭d13PĨ Ǝ 4\X+B2n\l!%{VspSKԩ%Y?Zqn7C hOF_ż%2u\_fP 3x!K҄qi8$?@$4R䁦 hko;muUo wU 0^Jw'ۤIo-NT ~G,iޗLs]3X$0vM@(n,5B6N1_dŌE>v2JW-rRTnJqZ#wg3;Hb[k^Fc0PU. I$Z:O2HVoG}oh%jx oˌ>0vtGCK<>u 04,A;/WTI#nXNF]T][A_1#n]˺L`CSYoэ8wH_<Gbs?Is޸dW0fKR,XJ<ː~;,pmXԢfDc'|l4͋ RPD4A?)DA^ Mx˘Ԃjo ?M/s۔RlH G6Hnde4 mX; (GHvQg"!.;7+߻073أ:|v/k>,DQf,R:*ɇ˯/* A]6 5e<ܲ7V,ƽE_6ѾGNͯBbrgwq0׫0؞+6g+E`}LM1*&׺gK6L_^斋kaƠ(o%XxHҪm3pfZK7IK,WyG>DPhRHYP3p' RP+Ƒ?H+Jq3(13MöA*zj<#:ī=[^ f=kp}Үo\_W}o ڟ,{$ TBD y")d`i^LĚqX^m s8-sQg1V0)nв}Qg:ל QZ1o7 t^+[{uLrM03d1, ) yzuGMQ&'9(Wpmg4\zth4>z 8 M4mZwyѕ%Tr n! c Mrp(ah,R~'{$s^1ZWG[ŜX(AaO֊jӰ5hE7Yo`]+P⼓#hz}f'z^|BS$cACo|HZMy=:#DRJg9Ud T=(muZ ]$h=H )UeI5tYfg&/m wBTx`N'i\"N~KgW~ߤ{-LƛO7Ok LJ !zGo)&Ř#ߪKn3Y.$Y?Of{27!C>Q:LhQTUQ!G|o-{r!mC/'Ҟ; 2%SoA"\jS.+33Z5{XiM]ZGPwWc-L3 of7ٲJ ]@C_DdUG2R}x@/\b{)Hݢcո'Cp|!1/>w+7lJ;3J5Y)]-f@o itozBWXW֯*S_|C(hfF0e:w&/Ϣe (G l6=sE0Uޗ B?'U_HÍۺ'fe7 < EEFi-F|r˞9SPGKtQ}6H9X]R6p%:``|0?GqU4<<.5cZ<'u5@D k$G〝YJ8386µ&jm2ʱ&X.>PDtF"SrJy*M$H2"mEwgx!5p(75Uʛ_Ŷ]qIX] z1Yv]{+ed%g}aDY0k w #&tewCV$ȸB$"l>x H_:2FYAWMVB=eEP!S#-]%]gT{ǺfX'tq|YZŕ'|vuS 4tor)]@*{YSl Ě%*]:|?;UnyZOēK믒^6C4(r5|Ѡ|/w*ϐ,$GB224gub+b'pKSKV@m22Xy㐭 qGv(NuhDB2_c9F"hQݓHJβS ]5:}Ku TW(5&c"›˰(6ndG>* NΈ:KbkүW u}O KR hF|"CYrQV\aV[v-%iY l 0ņPb˔6?KE\e}~7g|zoH܏9!tWN 0zg>v7o0ZT sϖ{~B^%3_l؀(S7c5nUvSbe#0ܾh [=n$NZ9A w ALo|eBߔ9CA ޸&<\ ̍Ͼ7?lM҉9\mf|lIdX:WY>{*bt| U2m$< `48FDPY\N|mwIfpz%EcГv'0SKd?#|2 guw=4& ?ŴI`% eC=Mh Bĺ?vmobR]quFﴯ;R'RL#uG32yJA+ۛoc(T Uvj%E݂ל+W0:]|6UAUp;x͎^׳f5)2|ωxku5dH?3ou$0]^4 -mK$5A_w w-7$sQA!zRȲ-<:dq,4MZ_+$_&=˭:kq?,lg}rP$<9hj~ ˍ湑c(WW Mledv35)܃CPCXZ7BPH-Lb7%7Z&6λ뫯9\D7eF"d"U;KPS{A(NѴgZҐҏrfA(jK }s/Ir(SC |>uNQɤ dA*R3't%$j!Q*VAFM!f\is?&fGܷl:W"wy oFhI ÕG8mRNf=U+'/ 1 lv>9Y~ b1O v =˖N`R, [U2cHByTxfTgPUNKm_k)=k{ѡڮ5vu$lbϺ`#(^SΪKˌ;!DBs~|Lk&Ïr]%qSjl7Ny %~"āմL h(*PM5!["'阖_ b&U̪/HCvK5I(a9| dz䐐zt]D`1Rn=ɚMs:5[!O>tlhy !{GVrŸHѩΔx|x0pBn":pCp<` =hXfwA4xdIJ޼zAw٫UcaRJ+w&m/! i?dCg)*ˣ)c<wp}#{7C?7bz.9}SXOL[Bhc2m4O>wV#0#6#7 ѓZͤhOIz YF!pq4ӔG%op V9shӀ3 `sk{֩6Ȍ/ۊ2W[y:}hr=Rs 4,MbE+жxbY{FWKJCQɆ&~&:!ndGZD|j.P h6_c8n #,&ov^5 [&X>DV6T;=aZ`ĝ?{"ƒ1PR6I[>A7C܉`+l&.=8yӺD?ݚOԁ]VWp]ZYzIhq{f4 _Pz{_JHߠ5X|BA3O1fB>+%b.6@N!S"L#*!0z OO$Jf#λ ; fduJ+:џ刂USbnE"kՆ"_e25ZqYt\5Wk% ˌ$]]VsW$WD];<ٚe$ aqᣮV=R&oExw/(h{&p*|;f%6rt)gBvͰg|W13WaL[@МTc)wȼњB?<dnyﴀwFdC6>6/IWfaٓSI#zeOp)Ԫ E0K|Gd?c  OqW9[ ͂ /#.m&m6+e"(;oҔmؓwB!+~ercpE-Yljظe!$6x| цTAP[4_g Wo:!{~R sk~ot2>hITڼ}ksOW8'3c]l \lݗ8.'*.㨯y+hTvdr}C'\WMvS37"c1`fd@&rU2S촪RA&M&@s)nPH, 4eBJ; S<|,ڟe7TNv9!y+B9iD,tR^ ]]DqaZW4,,{6A-ags$N9@y-ӄ#ZqslfBdrɑj%.?4a*F}uIz.83] a1I c.g9-CI WCGHY5tKRq TQA4^8aklEk09RrIQk1hte:O0;h뿙rX"j*41 aPDh鰾Φ4,y+oWf* d-D@џeT߯DGs^:G-KU>{NQ\\7Y"GI ROA ;.kw$;@^qxaְVEog:hBqc\9 Qz1@s[5^`U)Ւ5 9Wd2!A!*(tsaY{E2<}Yɉڌ/̴e;;AN~K2s ݠ.0F**JITj)$M>̓M":cߏPξx!&DWuMR,>ψR6)7 n]yhEyxRGXVcV+qoR{-b,$CF7(,Ȭ}Iz'v]1%ܟY}q胇QsfXYQΐrRbӶN-l|*R"}8+*'JMt M-^QeK^I6FL1䎍Kݐ0ᜉ,wz黨m"}V|q+טo80WĎU@#S%E8b/'"LcÉF\ETfR,NmM<ɔxX "We@l͒|&J@S轒dۚk$qSMӒ&[aϻ~*rL*̅zԗ &еlj.~.,L֬9`]q;l>*XEv[t]~bk"/.m$?R1Ỷ=%/]߅eܛ8=XE DŽPJgodž8Dug޳bAQ, xYF/L|>Pw? $$-G,XQqms@0u7ԧw 0EAӿ+MCgeu[DhCl"sE3&ց.pju9}ɜͷg6*2}WJ&aո8|`4xҪ[o2f>BedbOϞxfȷ\~#CG}9RF<=҈.s 6KTDc@-df4dSf2 T V~ڿҁ)׌7H S0O<*J QEG+&57tf},.6Ҏ(q>7jf" ˄a€h"я9CM " }9xǃ2 Vg2Iθ%te:mkzTu3)~@2ز2U 7t M|@BS ~-57c6m mriO8v*+K"jjN:F|NOɤ1,T*`%|p3>~|oc AoȖV<:WWH1;Cl.#f?EJ[{0-;IT z].HF8Ak݅eѡ'U6;AN:}t{t =xVЮ#+H Dη+tZ{r&eS`3|Y;W#%pk9څTKR ~gu sfV#?$'B7-%~v#jeYz?L`L)1Q]X/tYۨuɷ`ɧz]8Q*(H*x/gȹA{>uEDq?.´ to$zWи _Lt, ;55.U8`r)8yXs840sA[jjeBxYC٩3/-Y2匣%'+$W$KW*7#@$1mM5Y3oƲBaBz")EnO_U0;ghы AUN`K> {b P~N跒6$ hċlr U"t,k5aY^MPY{ljSO +WTKym?+c4 zwNV oʯ͒}%ͼo&~t&ѫ&l*{wT4:F @*o؅VEtؖa<8z@tI"a߰V+D Jac[\1O- ±G5Tv0xÙA JS90wdכ=9amGQBO/X{Cw;{ׂW<ސHۭR9@uxcxp㏟LϠzHd9:^GT5Q gz3t/It(j7ͲzDyBVQܓe9̱>CxX u oJ2rj7" _oh\k>LaO l|Lv!ѨugEQu81׋m=EȐt5P V8A7!LIrt1t"]gV>oԕ٧Jx>lZB?x JAL%a1PxfPr[k 9ۀG^SVf6M )Ěi㷍?jjI0U!u/Co-/6%O#[޳}] u}R[RWmvŒ@;著O/;ٻU?7()BT,IZ^UErڬ[&yrڲlǖv>V{K,͇`r nAk)/$/;z D=M1/8GJ}(c_1`S~"EzwlC0% #TvdlhפUwǟK].t&\ :cGR a,,0Y895E HKWj+K.H&(.:+U3gjT'qGcx dG@>%.J7NI^YaJ!%uU ?;^腇a"Y *Y_"CD6o~IfZb3@yꄏ HoEȥ"tUNiYրM]"|$TGo_pMa&O!T_ {Ti՜{`6ZOt|)\vnG7?KBGc*Yi>R1B4~sI&X*ks=]^^=4ī Y$O&9"6: (`FGy~`)bpGrY봼 ƨHGT#C.>U3 w~!ubR VVD!XO[ٕjװ0~+OBc=ym$n[8Ʋ8Wt\.k{IGg5)~mb;lc&q)v -?Pc-[i &_yLwډ$q 2K-EEPt kw͚H뙐]tmA&9r#:d9ՋZ3m'͆h7d%h.Q[4Uj۪? 8 +:Z1<}?]&_n%U˲n  J𙅆[q%~%x#o)_ԩ:X{yo5{5lnУXe GSĭL;~f9#OXsH0|$q g{WDi:bF$Ռ'%֪fQTvu`2Ɩ;ouv/zGQdUKa KQ̟_a YSLc m8L 3$|e80#a_%Ot /  A4C,W=zWP r@! SQh~'HXҙWj("b2\WqWJ"?')"Ov f%sT$Fw~tK剈-qMԼ@&ΝVѪ?XiLXpwLX[C޲ cYHRk9 D5Kj[E<*+%AǗ΀? EG, : d(qB'3zٓ0,n`Lx`j`Γ9u i|~ = P|ҵa rkF2BHX8f2俙5`tTy]1djtg-hE 55H|dL=:7LX1N7{I[_7x= 3zy/!:f0XkY4SEYa.kKʧppV#^{Wʡ06jJ\z?ҳæTS}(ݐ/`B¨ #ULŀoVA꼲P4'0sڋHiwnڿfc17j_|ɥ7(l,~y6_ndMiCГl[bW_}G:o*KkM.آ"\n^]|[[zW -[ٞ:*XTylE^9,Bʆ}\lG"{njS6EXrgthv/л}ıPn$b+?`~1遫YI&@\O? R ۻݩHZ2R)P]5]3ã NFWk@Fϩٴ!0i[Ð} tsSfyҹŻΗSB9  ܭvt dl`Ra#j, vRr"c"sي /V5+M)]# jİm?BNܸEuI/./J|>*گ]r ns-=p1%fb:D:v~ѝSfP*0]x9x=t"'{qT ܬ6, D-&㵞jWىCtӿ~2Ze MQ>7,_ p§Sm?#KUbÔz ?؀']x0)()>{+Bʕw똯.GR27s'0vLea£xF5LϳsB?dKK>p_doNKoi}5xVxՓhOT^3M X_^$]HzDm@h-?ͮwP 8nKLN(]T-?Zg( vT(Q9Qsꨉ73!/>_pW}jm1y@ڪב2Ӟp| /YiL&3&e07CO G$_EGԢHlj Z} 2a!4R83sX&3 & 3TTZ ӰAPqU 0X0lmvRHo!B4 .^̆Ut\+Ν5J9C:4e$?`N4Yq)t*ƃb_z7檇mGHNaS9iy֌$X)Ό8&:E#Wy+"' /`GI98JH@+>ͲA:e@e*xkPQV+]&dȚ!c_Z*:41`.xgB^h93Yȫ@S'JĶmtW(B5n+$e|ŬjD})͞rT 2hw LR/rխhɽZ$`!DSv ZU'O$KפM) I8nɶܐԿg52Gj߱hodQRΠ[S7mKvvt|hfqviQ. EYSHW7̜lV댕.JK+9o:QhWji2䠮??5R-ՒHC:j#/EN/IʫZ`- -Y)2rD癔ʮbPRjYSL&T*LF7YBx"ePx& `ޤ-upw*xu >hΘv19jMt w("n Q!^qrͻJݱ8b7e<I*s`5dU'yw 3ȫ-\yxTH¼l}6dã+l-#~F_rR!:-9~(kJ7cvgAchk0exu~ CP ŝ_5`f ^0Pw|!>0rpkQ{BEq1X Up0_I Qd6ujG17Q5xa.K}9Kʧ]cN-&ZKibqLX)e-ˊU°\`ni"`m/gV'k՚_:h=|GUjvEaSy&[K˻2x<¯Ṇ(p#ࡱ]rF|sKn=_0 XkXW?tږrh%[HP9PʭK!pBE'lGfi+]x06[lLx{_ъ0c_=9>2O[U3k:V#vSOj<.'oƒMLt/@Amz(/wNc]!&PY%)MB/ZilM*ޜ8kInXd1HBCVUA8($ZKƌ -dD~=r}]kʒCuQ.)% Eq'#3b2))v( {> J]wgTz%[_}>/[Tv>I["5-NՔ>;XV(U$KsW^bvwFq#ǒ()8GyyAj kn(N\f|a=z\25jZѤ8t8 TPee lYSG0Z@P6VJx=WpErpoy:37fU /j❉B}^QⅽTB ;BO3OʼZafb*I"& WLXCig1caȻuJ'n{bxAJu!\\R'䎗qኊBUhh??EdlaB=xXI:R?/gy.EBƢHmr3_\/p͝B/LWkooG8: E $.ڱ$E2 32ީD/!M.pt |L^A{UvMء$nFن֕<% <̱],QxaNnU\#o#ow}Vtٽn$ sQ3qZa~%Is3DpU׀tfpwk>呱d"'3F}wAx6H4ģsq+qDdSjM}+j^uU9Ȗ80sHzpkc®ߘF(tʖM3ly<6#d Wkē{G64{XKn%.r0RsY 4BOAj~kjDM iXRL:+ÎŷF0JW&GSF>8X5W̍Dk_ SKJ ȅURTĮGKM07'i}ȰC*CcGW"{S죓4%} >Su̍Eȷ$9.mZYƊD,JQLSIYci=UyX&2!Ry82PNJ0PIidUOQ( &ЂU>&@ai("f &RSn?jY~ h( $8nܩݰ;'s A ]:t/{]S?NժXLڵnYb4#l7,4}@4JЩ}bf;>#@%\nC fd͂1'S}L$;:KT+rma@w6JܹJM4c=&qS_Zb=y>@<}i 4]D e9)nW/K$VL&~k_ۨn^ ,y xAHb?!G)tZ.oSS%ɺg+Y-/fdA0kwʓ_D(^+ٞY| r+mGeD\IJ|J\t&<@^Xg2ř%VbM1FMfz>)skÒ"5\5vZn?z\&}X7twzZ@,# f<'4wsh]\1вU^tm:1 Օyg&r͋x|5{Kt1@;g>3/<}){i7N!}⦪E09( a$?F5?N%hgAz0I['f p)/}⌥zU|JO81;ke(_lgHBuJ08b_c"3\7XDVm.IAYV`lb#ߴ3i(\9Cf!b^oWIְ6gQ-XN(C7&X4y @3fI7%΃iv_Pn'M3)pd㢰UL}t:9)$)uVGbr|45Q1_dupq(JA$m"0G;ѳDd.]t+>;!X(g wCe<+ G˺,;A\WuMr (tyv_nx_.4, /lj^hA79,"/ :tJ5_ko_?IgɤβzVRJNШGS 3b&I-Q&Y}a|d^7 $Uٚ(u#O}g5M]) `f> . R+)d]VZoEG>Cfpij,M6d+?9^cs^+Υ,wHȖz VlRV3rO_P-kpz%ҭ4ALB0na Hc5%>=G=-Xb.O))3?]a/G6qd&܏@>qDFlԹљ0zhЎlH) g]e0|;``&zBDE8.jW{WM#n&0|Wx2 0C_9@KGy`ʊגZպ(p@sdIC%;[‹xD6FnW 0m0(DXW;Y?&i:ՉibinGzXفeWWox%}:Y҉&Oy'5HE)o4znhKp.ڝ\Pɏ0CێR%sznH]wZU;&NF^ѻR*(qgPP&@ّ5A[__',PKmHߑy#=M[, 6ZhV,p9"8g;Wɓa净TDP!2vvJ뱆'NĿXMVrA+SG$*1{{.xhcJdiGQoZ|qGSwr`Q^Tʏ H%>I*]#@gPăU"8i_2. /O;鳾H:\"x D 57\3 dvi0v/ڄY)Уgj@;0v':Ң|N\-Scu-Ǯ\\T+ɕ1e?A@ՠ=/=fX8@K(~fuu3\E " z0TqWaQ=txp*4zzn+ vaHY JRӕ8ܮ#gO4u]}iM8s,$nԆWWߢ8>Ԉ9G Bh; } _]5a% 6~9hi~R 8RNa6Bl喱cc `r:350tއVWUО+mQQUx7-.},TeQ 0)uD <`!}073ZheV%^3Rm/(&Ā 5>X U7Ը\얎 z5VILl L<kCl/Z #%ɅXܫSj%\n.`AoѤHȮx n!00-=P@H_}74RlGrшi<]q'?(z Ys7n٩YJȜ9;JOYyBPq@.{ `plӪMл& fCjՏF0dT ]Lye70 >vwA3PZ}L #Cy b>Uh.*dCQj#u h"-&kCgnU{#(8N8zJW#L;>ֳ4yWg o"KOGk[5 N2W hnVZP MRAlɐy5ɶcl~( o We>sHそ0ߋGr -e5RUHhM=_] ak1͎pưت;+ CDLr91|L= q.6\-U2Sa45>{qS1{ @"_ЁDC@mڿ1am+,ǢWq'Θ=pSG^sDT5/DkHߙ~p7?E0uw+v7^Md龂 +PsuɕMS ;!|A8O (9KPU|]afFJ2x//EY"S')'lUvY"f3Ě9aly@BIXeM1vM\#q)&R(٠h$G``o!Mh⡆rEX0I=^TfB&‚٤Ԗ :nd;JY^J& NYtPaD0\%[?d)J,6#b6Vv):vpywX 8SGͩ|?nIڃ)۰m)E V_3(FL#N#7ɐDfFNs6TuwQf'7O06 a]3s3]>:THd9?nEAPY" JC6ŃX7`VNMRc1ӏp<"gIi%ݟfIQ#P:⴨5E<xtScGq+v*6K+N\pj$ N1Y-:8f"oP\1_L`hP)un~Fu%\wڕ܊|gnj 쥬T9g{8{)CqwR[{ 8`V͓qtlr% #A{" ,{h$$ ŏ;:D T}n-}Ҽ=]1]R޵fQ_C^/.|NY=UZrpmŖ#+xmr Hpv:Dw7҃DD㞱$sITj9NGCXOfQnĪ| EG>%V7; bN!I8E4|Is 9 :# #\&•Xr8| 赡8;`u_d[eܯ{z;5H%_Ra'W.?Ra A[:=Ff:^N u\Id}f2TSZ[` 7%@ ЮVr* N6Hkj} XZS>Wiz$o\stզZIj{i\|Ro&RҭUQJL WȠQo}@v?QIma`7Ͷgd#+R'L6zy#=2ȧ4iG]֘ʧ:=e>H'XNFF[do=sHMB@ޫeUI`;~#q+uq k7 ͽ-Ñ=!eD`б2"1_Um'ul/ݤ%!s j#mAuAdղ8Kg`aT3N%bG8f+&~ Ţ277sozR=8eKx%{6Z3# E*9`ںW,OfS 3q+׬ b&fۼe橪]a_~$dz"ߊi)71gwU ?~*x!#Lbxς}o1@ҕ YAĠ"]~֤z2pkSyJ^#ot*\9okw 59J񑴬cNHϱ2R1ΓpΜ"\FD_<5 %k>-`9DZj2t+ZGW3 DRg[djFM.hÇմbp_ԻrG$0SG*ͱ˱5pNVw\C&=|'\ɪRtIF(H.)x'>ŰS*&;+m<{\+;N2V}c۹kFci9LS uq\_`>\dIjfrd+CU| F a˵!Vᕂ?06 ~])N v[?d7<߱hZhlD#,.FhbFwcf:o=@Վ*8@#+tIx~6 Z7~PL&a(9$ O h: |&9j`` -EnPMKL;ȫ*?ـ50N70>yEUKPP!E33(֙tsPBOżoM&wrGqEk'R)|0M7XSU/` :tzThNIrK4 YWт' ^Č'SldzDfǠV=V{>YcNĹ`& _0su,i]=(z林 n}82\ fA;mvHKh[ʉ-x|MJ{*][(L\IZ |m,3 ʤpJ? ފv`m[}P 0j߽<+ aTE=bU[E{< #/=LoH4ySs'u]ͺyCɛ]tiD}:qDVT5*Wcښ90rtb6`x1ܜs2u* S)u%T`J:[ȵ, ڳXp*Ʊ``A۳n9aZZDdv0W08ctm M(e،) b{BT?#N*=5`jٔW5Xm9"8{ ͟8G?+ON\hN&KW7_eP4|Ƈ%$y*MP.KЏn)2avπ 6:nJͪ)eLg\)3P|:R`,q ϸWj }H*0 $Z%fGZKfM>=e>L犒=+=ӗ (ldʵEtg~N_=)kVUi掙15*a3H 'ۊ|X|sltmHCZ3'y{{uJǥ4?nxi{ݚL1:v=9-%m ﳄ@ aZ<@'ڟd/ t쇰Emٳpޜ|u^:* `mPPE8hpP~)#Hj-t3-}wu@]]h;#$ff?,PaLV/ m4ʩ͕;j%p]E~r(~S9h%%6S= #THA~N l8FZ扛/AF6XROskm:bK iQH)2^G"3[D]F`zg\Ԗ8@\;m #JD}JC[`BHJ *,wWjj]4`dշ94% pz޾K 9'ttIhY!8>9ONddq@ەƜB> J=J;D %M ̠\iH¥E_cb88bt}x%K Eއ[~Q9M9EG G\%,v{?d(&'rmQ'W=Ck`]/ ls1_nAo#? nosu񯑬ր/EAfr#1S|F{,ox21nQRڀ{mI;=JIvؕzGuۦ}fz 2lK@_ AB4M_GI9!"R&aPl S7 WIukt~%1EcGHۯ)'@lض53Rʍ,̪w#P{V(- >0<)Y 8pgh\F(1]m%P4xX潖YV\мz;ŏߙF< cctnn8\|0,TYF*G4۟<$PY}9ǽlc4foQ]KmuaeyagPgA`eܓ\&m;,UW^eP|Tky7VRAߚ}/MAdRpA+9"Z֘0?,Fx4̳ )R5/ $jX%}m+jUTurKR56=TLw %ѡ#[ύA|W;53Qk?_Ke>?1$h}2F?"QAdg(>$wU69\얖n%q4^WV09ev/ nB:nyj0X̖]HV ߶Adc&]Q>%Ve$' !X0<&]6>BDz#\#1LQұqtz̍=Wd:j&Hl3Ug}sR+wzڑ>9(qP" eU ΍M3/wjlW%Jr9tyA;/tK t{`|m`(4'L -(uNRם M5Rڅ&翍U"dzpj.\umg}ZK3z?d~3B  \GftZi@TJd>YTKxOP~.䀏/zn MeI!0ǥu~&}Z@!VLx <;2kt6uTQ_='QJaE6* WT_w4 u#""싫! !Acm_%!buxR T\j: PJz=BF%iZaf1sr]hen 4u7 pl{1DT"g{R47ޞ~8ML$օՙvZh1 30C-zaviF=-͗-}㿁QpX胪{:Q#&ޣbpNr*ORH٠s)3wa7n飶,ltn j/4R=2F9yH7:hQ_r73@! L.=x{HׇYk ,0VlcC(hFiU@pR6h:X[F浱H9 uzI>/kJ''+ ˧mV.g.?fÇ`Z pF#W}.ҍdJJ ~;Ne]8sMW x%y/$ݢ*loC+ 1yW,19\*DYH!`TpvN<)y/UwߥE!}#NԦHD5X'>\ܞɫZ tu=jޠNIZWS$>7 Hj8~ Aͧ(PF}yzR[NwB”<1y(bLs˦Y֝ *aK hX#0~Y̌f>%(aCEOFº gutn1)^h2(1AӟM ob˚O-YQcDp6}<\D2ɓZD\2H}co집dT6qR:o6⇶foZ[R$J3Dޱg@%vˋV#!~^]JlQ-8&W?t>"^̿@ [Jj_|y9<ߤgPISi)WgWuu(ďrn2 2; f3d _E_U\xX8P+"`qZ =nTlhwٚFBG`(om^|OϦA,J[ s';z_C7UG ʄﴕ_DD!j-y41hr7(z}GfZ /Lrq'r^^?P 8I.=n߳rG$9%ZȱP5ANِK Ͳ-HYÌ1ՆQBۣ,d| _#rFj!i I3oHzv?`G9amgLJP^u`5+V%WI2نgm]"E-L}`2M!FeX/{S0X3䦵C)Y61N ޵!l'-/waa݁:)寿'z(U` ćTsà ɏB֊B; `)p|\@Pj ݌Ԡ?pYwEѴ.m,BHnEs1+'7V^Fg,̯mBoX׍wi6AhAM`c뙕I?!K xˆׄBҬz>+&؅6NBUagb$Yrk=d al3Ƣ"^bKw~Q>^R/P!~֞T'wRsRed"oal@r#9 xC$;=<+tF'w/ 6lNF1>;ƒ<[0Ѓ3p݀QNg,>mw]$ڱҿ3r-0A)ckvA; !R82\.#r˔ϚCU=RLcp&g$Hkto jH3_Ȫ8R=ܙl2 u.qoCeID]jl ()MJ1."S5zTƓO&Jf|sYg]dS>nVi I!XeAszl{ѫmz}5V"kLG]E6}}3ɈtbKZ䨝@UUa= 뉖Vmkd4KAl0ʉƍ58l+&C%Z& 4C -k>hmG]]F~U8LIijKmB^Wm韫hV HM`X  (3H ݭ ;ʾ.  {!j)夹v&*+~c) I poiӎZS2$O G~t@$k}$y^HzYe/@c%;]wyzjAQD 9V@/'kKN}Pg# 2Q-^+]e !gSFBlis$SEV0BD|ZYj+ F@\-\A ؉s{1 xiR-W!f)ҵgcc3/ \d=j]~6Ptfok«&ɸ0$^O)iڝпy |'tی2"ۈ,"H ݙ<3ӹ2c d#l}a2,V e[F (pkuzAw- ī-)GN(Y6єP#LwvtFQO|'shU:lLjv<t9=0TOgŲ7pRgĦֲh&y5jR\JE(@{aFa쩁1a U 7lBSPPWcƞ! Mbl@D`t|hFSO4? 7YUMdJd;,+<85Cp T_JRWH\r &s1 hM*" `vok~ʁA2oŭ5%.z^94L4>*1Y1 |X,)un)ynP n5"O #D_N -)Zm:'pmA4u <0ymRjP~x3l1l\'Ba&BRaW64kg`_v+V?8)M5%l۷RNtՖ~\i'I@[ \h% pDPc h ;@P聆$8ca09r'N*''_$aFiZ<؟xQDt1hvV)O2YVKX;Y]$?𡷩x/}ۄsŵ UR"zh`gXtUܶV24ml*>sDLG^6) g.Kd̒ 32qi_2(u⾸*rFYkULIqf-]'Ξ)/ 譏&9so緲I׍SeeNjNɌ*j#Xy:=]ltO{ϊ+V%qll+Qī{k &m-=vyd3K b*: =OjIvOM:e8~Q֖v~4?6C>GN"˱9m02tTy:e?܎K!,D ybݖ0ˀڭUyv˫Vf*4+dR8"iU w$Mx'FrvifMn6ۍuf{,i2q[p>v鄛~ǰJkA8Qk=@? J1Egv DۂLn֜@=~tI^TZt57(0i 8RN5>8$Y<*o+P=`( 63K"P ܗ*:b精z> _-Z ~B3!,6O^#MIhaeEE Jj4f't< 4\}HFۨ\*Tc[8 Bsk ,"pK[ a!bʶ>gCҺtd/=3|AxF>bu.iOi$7e;,@Ш|X*]8ӵE`>pj tkUg< 狗e|Z")!YFb9#Q>PoL*~lVsdMevqhpÜg9\_GbmtutUS淓K'ȇX#Vi ޷.<_[23<}{ӟ]--/`(Ñ d" Wr^&?cсM@u!.'Zt LMOGNEQ}I %zs76DM*QJ^vE*+U?Pkza*S?(1^d` ]ƏMuMsm@ ,Yq>4V/I?EXipRł"y@ ~i%5Ӛds? p SwRKtD;PoVNs8t9FbiЁ |ÝDʮ a f@+lv +=&B4tYr@ ]pǝlByFwX-(A%IE2^uĢ0e`|E*Z^TvU5v$[a3,E tڒs]o {m_ljyzt!FVk$5 \8`GrҖ޽abjYLo3C]UN;W@=w+Jƾڱ}niLDCNPG $@/Zw$qz" QC:Q8q|mK9Buf% jqStXqkQݬ:|\nrk.f/N 'K6wMe~@p+xb񁹔&Rl YWdU Hk<ZDtX%s}~ڞwo W ;h ˌVxmSQc$_k2)Ͱ.n١E K|s`>g #eh.2+r7DZ0m tDQH훇mX }s!GwtX*I~!cڦg3<߽?X@Qʱ!UHð.TM u. lDEf1uhƹ7w , QX܃PHw1s d-1{7ZVQvYԚH/8ʄRGo!TA9.޲A{!>UC GeLg'K#QmJ)c*N+Ї`ٖ U\({vXCtjN$I.@=}:r,Rª g7\xGzԎ!fm%W'# $v Pi2\7/ik0,>Q'HdwB-Q8T9 %`MܐIhS_ ZJ s9Yiv1*D@ܟ/Rhxk,tAYUIjl1O`ג_M_E:"0YFN@Zgu=7;RKq\Ao\0!SNL !B0 '/ F8Q}ۀ-՝'C7DhwtKƵf0 ]TUZA`:lNUdrciE]_uJ&4VS ĸGOJކym DƹLO[ϟ:kOi~QP,('=▊T}r+0Bð7CL٠nQ ]8y4$_ 1(QrVWٜj{W=; ŀZ$|2RGnY {Do2#O~ 4}OpKx҉_NǼHz-7C%9_Dsx~k ( 6І lsU _GE)|L> S&QFnZ$>RI{G1ᆼ65&TP%UV+蛵%1k_1ڻ^z#HR\ԍ>xngd`C YWk%!F?jۢMe >*eKZuwnw7,8^OD2aNT6(}= o2Q&eu(xD a",> 1P;j&~:WJj޲,yD},bQBcƒ̘FA7m?e_B+qYge QtLD/)`n~56SgQwEߋ$vk넪Juئ:pؽ׍]j gފ0*Dhqg%Nuo`2s`?)nXOT 7 65%JX;=x~̕^Rn3c79b-^ ZT7j<#f&B|-,thGkFDaqFQDPr7kEMm@f*Q4?%kabA`w(`Ue^ =vXiPwZM=p3X֗ `[H~P7!k,Rss(lB҉]xU+QCZ2uEZ[hllW)5#&pv*"]#idwdfPB}"}lZ-CN\ Ԩ))|m "3@&SyXHk^,!Ēq;'riRԲ 3ro1o\?2E:lqK~8`G*B{iQc$|}\c-9+iq}ymҟ͍֐3Ҋ4B2: hyb?Ql]_k*FPU%Cp"}c/ 21f˵bPb5 Ζ>$੺JI|:԰eZQ>5{TX2?Kb;6Ins'6=!#L1?4xA_OϰrOsJ1ryim S- *\Z h+ xk`Վx GmU7T^?pIbu[U޳ UXeE!RsC:00[d#ϣ8Dha6 5lyv5S~N|K۽l_8uقkRۧFi"!KHxl"@a=À.1X2vhNBut.jxӅJ?Pdޱ$ݵ~ k]Q/t0D %SOF%RmIj00AMÂ) Ѧ}V>1lC v!">, 'rNd䉣0j+Sg4K+LQZY>2m踂#y/q 6l@WN :b8y5e=Чy48=+BO-&g]A{ᎄﻭ!MF|ozb C˥"s .V3Г$kKuz.JZFM D% ? I1 7*\Uux/z/x8" \yNaO,q #k)$i@+*zRSnB姝,*iSeZuR{/ɕ|'<*ŵȧjeJ!r=d1',L %^)'qhD* uo|/ 紧voo͛j}jكfo'U. pDf]@NJDŽG̈)`WVr7L) K #Ԫ2qEr Gj~ =杭=vȭ{=:+Njbq *!|g3)ї"}]vҤr끷 ԇ^ʥn=y}?P3IN?)))h!E05@ 9zZY5W]rIt~׮M;0ua-mqJ$->n˓" h VGn+Wn&*8b6>C zʛLji/X:*ΗFX@۠#.Z;WoШ8UʜkIVꄦ؛*8¦uYi€C+uy )sM<H7/奄>M?CWwtt'~i1P#fd/"M y^Ӕ{a{~븯 USRmE:{ldyb@\[SyVF] Γg};1m*^lE!!0ՐwP)e[DFgܜ`#sI8oڷ+p[O}bGo`e%*yOg_&-y*|c]$h@LO72Ay[{g~e$3 (w9&_0L>ULb6ޘM~0]|o^\ԙ7==>FZ'd^vP[L?A;#M{{D݂U&횙NlPYU71I&ۑ_ CNT(?izĸgZ!7]9OCKw -VDzO^ c֨E5J#**SjeGZ3:P9/Fr܍U~F1;?_ފFa|.<Y]Br8G#دo42~&v`k]]'@5_|+s_֊ s+1|;EGKXr+%ښ-\]ݽ3$Y2i~|N8 % 6E41 Ƹ )8j;Y$CBxԑ I2w~9DHϝfHo# i]Ֆ`e#`/ͰA];9EH@r콜X?_ƭ㯛;DmBo]Sj͜bUc1)B$cR%tƢVji^yX솒 NVAr8_!Q?Z^}1n-/F7 8nowS)U]ҝC) ă+*<ԇDv~"B-JJnŭ BV^֨ M*IǡᩉjeC1\p{$Yjl.3zmbY$V^wRf0 _l g+  0U26<ğ)[`ZM&vÅ1;|I42`=܀;&!ANA5jӿy.${B.dln^V1 ht)=cH 8w+[\dckЄ!>RnA FKl߹Q{:HL J$ 4rPn +H Gtw+Ց84$q0 $!Ȕ \O7hg]L V 7`0es}rA@``y8/k-3ކuűͥrNX{?)K-Ԣ`l51SDu<BWd[{-urjAl*XHr ,@ JN f(&UYA[il%qgG)+<^QRi5 _-4\7h $V{C3Yz/D|5TX ƣ|i6?UkpiuisJu=doWxD# /)UW)4rbMZGDXYqvQU]]4C&v \9Y)H;qFn1%m]FoK#tp SVgK+6٢>g$PatEDœ_1k?M& m{hz\io"CRÀM(3 kqwc %X4T˦M껗r)5-/J ʼ&B=GJx+gY&ʘK ̭ÝHއmWm6迵h;nkyo=P퉪*~"VrUY> ҟuׯ3e%V/ qG:4pIʵ {HʥjFz}B:j9a2.f@dD,G0 U/jBaVQf#7!FlC"}L4]>2&=)?Flz n[Lb"ТpQSt$zGIMEC9Z}YjZnU=]<0!!󍯦٤[m#YXa7霛nEe#Q8JAT`IgWFPka3૦>+ͼw._-L2&ehqw%kHڄw[JZ ]w̔{3cY^7OR8Ol+Ta c5|H^g 2~*K҄i5fS@{3&D˾V: %D Tٚd1& vql"e.=pUn +7~WSSMlM~˪˸9Pb{ аܼM? s*:C_-ŠBmw'Do^k]XZwSTdN;t 6~ee Cz*uڏtø%n<kOa$ivֶE@s+^tsoJ۱7 oH]jqzUeU!c4}"J:;!EVx&p.tCݧy,yVJMϦ=vՐ!d}a9fqqȠrW zS lf}Yo61K+U`.gE&#xJ@B.<&Z~by8 %t6lI;]^'+$&T>U]\WjSjϿU;p .Je/{{MX~<9&Qýyݺr{ t:t>X-5p1I Nԙm].v|mkޚrtW7/sn#xl q8&HJ6#8U.e}PiA ~࠙{SIBTA>׌b }-gSF%M{@pĿؽ~٬,uliYw/ =jrEaDpΊ# ~.4@/oyk]F!,>Jg/| V'!ʣS|BH#~/$x+HŊӥ3hU=UB4ek>@܋oXG$g`T.=YȌn'2$du Ǚ,oZ9T~(u NO6DĄW>;u/1{LF j2zJj}] JX?Q'mJ F!SiҰ?rˁ4ֶG[ 0%6D~gAF8DqЬ;' P:96r(`,?1B! 6ѬmϔxZY@r>BzcκLD qі)ikq\p y,X #YB"*rL?p~rǥFA4ope8wfl:-w nsS.̷ŕ $UeESc5r'!&'@ǜ(>t*=Qx(MĖ((Y^M|]'qa OdXqP3j|eA)GTcߩߊ!Ł%ʣt!4? tOtޖ- 7"'{ `mf=ۙN$4)Y?;[DmN 5 9ibx> om`WF P*]V:'=h> 6V%qIAxrwbRc朴YQ lAUcFAߩFIl$km{CP}UEw)d{ /÷xKq}Q"lMX)0̀@[ #IF쀛e4{Qխa6%nvꥷΒApp"p(:|lxT[$\fD ӒFd<_^"Rt/LF9 / 'ﺶKTѣ}CCu\|ٳQ!acP^絳3 ڍ_P) z(F^ȁDYvVy{~\"-iLh$o_CE8sz0qb I{pWV&:X-!$^ٟqQmeW Tlgcf=RRȅPoߙ+A~76 qBp[wѲXQ0 ,:(̣<52;}y :!ӊF/dJ|r6|2}q3R"x"Vd7Z&"jfr^Lf>ĔATq`ۄvҙdzV̜ӰBrW]'󷖲?Ź00DuI&b~$6z]u0\wIƱeI*^8\nպzYEU_oHűuES)HRQ`YdimXlR*Ӯя[<_! 禓qɚ#aګ;_"#x#$EѬEy99^=}? uOv>j]/@jdtJ!|)'![F17#rY5?"eTl֊o9 H qS ʶJax7}?3 bEpǹhOf!BF$:4QqR ;e;@D0 *!G;2MZXf/7u:Uc.Jg&6Ͳ|$ζ4,@p0:5{ngH sbmD;ȞBiOAÆ7 mAǿOaqN%j{}cƞ_ښyw- gZE`8,k m].(@ NRsI39SR _0G#$HjPh㍄UKnǼ2YTV4>M'kW3X[e1z] 1njd@Mm‚bӟU"(}̠NBp7b &9LT$]!+ع$5ք"iS2EJ<%(Oub+)oͯS3禹Dǽ6u0G_I2ccD5۔a"c3UxY-"fQ<ROxT!ذI\|L2$ \s[y +F ڏ鲞?Π%7<6Qсk8񬀸g=bNfVaZOS7^W,K7Mof6A ،S!n }!P4)NZf2X~CE- sWd?i5 -FF<.R=`.&~Q`t#H!yP\:A`XnRӁ,$r=\2cE?nIn[d_]G|ۤp:ݺo9i'T_Pr-r?/3nC¤ӆgB~K5?`|Hz\e4`M'Wv eiyq:M=¼}ܡ,cw,[m^+6[j>sMZJ饣sJ.VwU>ˆ8?UoZR⌖F#QaD֓ea铫J c_\}pl-@HhDLC.wZJSUtyJxΜkC- tt}@/U?D*-"n^N> .v$nP)3V?3z~ɏo/p^ ?(E%Lf1:3E>bqE*Dduq9[9QLr 3ˉ6Tx!UyB8 ,z}n 'lڏ,ܠ@m?r9Q҉VhEM#ފz6ի_#„?m'BY~|FFmF/05N8YK\ EГ]dmPsPl.miP/ՃDNtbn4[BԔk=8D>H\/}!F]lK7;.Bu_A=Sl__@H,#ҫKItдp!Y8'dx*)x;K kT~g3n-K\8Z5sc O5"V" REO:D4_-|="w]|Aupoe[ӃP;]Ե1Pa@'?:>vyf[!z>?qOhߧ@oA{IJӝPv-dAurn A<}~rI` f:VKC~fXz:  ԑݞ_ʹehCD~Cڅ)+1-pN S;܀hDwLi8dpC{6?MyNt{(|Zuɉ3SdGdVgmlQ0w8Y?ۑX#4=m~5VV݀LKSpٔgSa'kM-7  PK9 Ny֧& h$Ws8X+n͢.mKn.&Hř>^zte゜9 <뜺`ھHa"E r$rH_l}Կ<7 HG’$J@; XEӈIQ,+/#+8EAo~R@Ó 'w f2#Y%' j3Z@H&YlAushZ.Ǹ`5~46I[]H[D\9k/iNAeJ\Ze™ ]ZXzs}&Se!(-z!Ak&a~x]-U)cQMYKRT A`tZ]Y -O#vORm볎wUaɹ)>`P{Y#?0m#KqLL. gs{ܛ|l_$wCjMMT% btHz T/>uKkwfDMv¯[R?FeG@du͂qs4[nA"~MxR^sQ@J)w] kMGh0%$.)&À]= *.ǹ7LvKDBP>z)wV'>[WOi[[dA._4ZS8YU/" 쩌&7ӫ.TĘrb"O~Jo%vq?}РZz@IlaRxI! ogޙST諚hJLѨURtėo)J˯d ByBdqO[EA'M"YN{T01⬜vNoF> >3}SzŕM˞ι&ZBASi"amԉl10.߉NPɔB"Li`b9d'D}snj$~Q(n-6`PA X:=9M@>2ibCsg#0jq^odę+:+;{ Ojl2Y6>u83~[ϜGnTtC5 /;0)|Y]}Xp| 0'f"B~Hf3s#{`ҕ֬R9=zl"B%}' gQf0fmQ\׃$˝*Yd>j}z^+P{ xǰJ p3 ɪREU D/V G&gޗI @l*},*O"{^܏)Rj3pQ tQGö'tlMwxo&ZQF9e [4ߋ)a[r xDΣPZ,DyI5~,F (* }`ctW{P*i#}5C2e9ujV'&э\|xr1P{3sY{_t7>1ݼiY)w~_5Jh$Y&^ob ds_%o"3wa̐F:>й+I,CMG%L7-E8ASKO8xC@,N뾙& 16( ܷL}Hp. x ,_OjT2L3yó>R猤zR|˔ 8| ŵ=ׁζ|霁*s9 Hŕ#FFܲP@]bꄎ7-οN[c&ct2 @o(t)J 1^<"@qie%a}:oHS51TF: ^Au;/#uPJu>%fCbM—#Pepp3 0X,3Ave[+n}$BMg]UpC]} S@)i$>.ia(;X2+=SNvS7 oĤ+֣im&+_ӎ`sC_MDR 4o],_ )۬ v^bt=EgƾI[94?QvfW?󁰡,G"،w1:B9A!:^)a/i|^%M\2P +OU5 %"TDaznP|l'FP 4s:? NfɤUb [w,ޥr:5K΅Cv 4ҐłDA9o&?Iv-]/qjCth nh6ĭ ^s2|P 'pyfcyJo*K@~{CJQTSB^ucGdy=ZDLBp[j|(Dit56y˜^A-Xp#_>޶'^V ?Z􉳚J Zov T%v!3\iFNys4Wr՛]sqQcE* L)忚 A`dg3@,[>0'1EM! #M@}Y(BR-pg `+Psc]mWmdp#x d'z;^I#Ub9\ZӐN\秤5Ҷrn@fWms}<9ӛLz>vĔ:뉿$1sEyĨlzpIkß3,-)5ƒT҈c] s|xGrUXzviMuܶ=@ .Y!38F_@ @6%:Z ,7 $ m明B ի0ҟ:LBXr%;wJ4c(N҃1 }eE:jvX# o=TJ'Böƴ&_|Kق`7@?4a)峀vvpq ƹ;_뺨y0f8UU-IH/8R+a:Rs OlLӥʿMUh6w*"&[} qQ`ۂx3nMPZ7,.R-#e0A5.|~<7|ƀ&Do|02 epL_F]Y.Z[&S}N mZ( lP< QWǫn- /Q?E0L:$aP"Ehs>߹+&x*SsГ^|4Z$"S.⮒rp DJ4'<֥uI?&-ܰf^-$N.I.Ľ_c[Јs¯_³C I>[W9dJdznHԌ. /Xy MRέq@#gs ]o #oj kOę=n m(qf`U57eADCQ1 AJq䈠n8gs7W syq`ܠF(wP2@A|Ff.̝P`]㌸9EWmҫVZ9L K9 G 2BIOl2I*U!IY+cݘ۾&b"$ Pֵw2ǂbi IUqu$'ztL^Qpk4P`#]GДLbGz!x,md.fnHK^?wt2GGGtH\c ~ v=%|zw7l4 Wd2O۩u ÑԳ"ro`6(Ԁc X!Vf+M TNT\:29?m:l`yۍ8 \d7O#({_4+;:y4ױg[tN1{z:k* ƀɺ^w`0rrpfvJChufOAM 4EK`ֻŶJl% þԇ=dYႄQeǦuٖOAT C ~dsTj(h-fBƁdIyy:-.K g_}r4c5f80dN"D1Č;r ݕtaW0RD_s(#$PY?Jӻ!5Igͤ3>N{LGo&cmmԉ*#C`;&uZȕZ3`2I0@)O۳X%gF692CPD dљ'T`ؐl6\ ݈v%[qG;'U@/Lg(㎠PVXbݦ6ا/;>IgW@?kH pk0ahC0$'/eoގO zux磻zmK(\X/@7j Gǧ}shyj`l6U4iYO:l4ˬyHY`PH?q!KF qVIYFN$X 91t988݄J%= FLğy?a-$mF.Y0M2+ K g¢X})LQrzw_qgD]GWMrL&=3y5<zp<,I&Z,`mΨ m_"< 6iȚʼnu*'5>VɾB;]qOb ~f|VxfП 7Kf4~ Dh^4IzDŊpO[+[ltC 6' Wje+D2aڬC\\5H2 s/4.O]y$+r[C/j|ǿڇ˰nz"A]o˹Kl|.|a4g F!Jg樸_(K<-8꺠aac8)0iږAEgl=*С&yL0l9Z[&g2krlD' Kk ;%bsHmHotGRdMog&/0Lк i0L/+ HC~1dIUzœ0;横ELCRCALӾcvbM)36Ac^Z |jQG5gg_\p_iq?kLZ?ݠoe}jI\ @TsyB#LsiǶ{q`8Xm-h'RWi6Zrz|%SoŹ'V1=6Gڃ۝$j jBAI" TJ?"j n,%馎k *iЙ ڇb'Rչǟ:idҿSiLHrXld" ǧ6]S u} ߔ-O=KuNŕ: x1)fqºE ˣ\g,=kl?x#֠?>Ig(Bjky,z)ʞDSZk oMYTۿ/p3Prǀbw{f~lƂYܘ67sksXϢ\ZyC["ďt)')˸SCcy0t\lˇyτ e.Fs3/**:a ǓryoSQrȦƪlQ tVY*ӓ R.w )0|.OKRdI{LmLvd]W[l Pl{ CO7 1hǏqK:—J rBaH%0daS މc~ą;5Tx{Sw#fi1T@A8"7h)>q'c6q:\#FQT?lQAَR<$z:EmvHwa!O5C(ʁAbEj"-Džr G 1XQ! =[ۺcRJMnlG ^)\o zv oaPC'&4yo4)փ'G_S R&3+'4Ͱka~(8!(=}[0AC?XhCs:mr;~1=4;OqҪ=ոeĸ|d5h9>m ʭٖ.f&M(?=.vy 2j}ņhi\s$!3$y,XpA):!>c/;:(#IY$VO=Tnkme'pbU1eLviܚ_4e fS}Jߎ}EhAŽ[%ue$=]M1rXA*/Մul ״@h؀v*~.H ]F7zTT*N 5;xrI/E [EԜH%u+i ^/+65K)B|OKcwPL-Xr?Utcl6uqwߝOOu& *K1.]-wpj0teV6⑤B8`2!yo1Lu%i]N@|-wHh\J!bx zbÛIP^ւBG4z~qPwںӟB"C$H+Zs֫;E!敟}~GhH|^H@R3؏7W4]z1}:¥X4ie9tM}͏X(i/6,D%~N¶Kg|YG dY:9qmcKv $h)Y&y8: 5Ta@T CJ@ZT$ig_CTwn:828^cό. hmDM]΃{Yc:wLRz>2k>@q{UPeg>z[ꥺW_lcI!lg*CԼOhrSo*'-ۆz+Y{л|yHvCn0lʉ fSK`(ɓ5 >yѝ:y~zYfw<-֢QFB}wXeA*yjEΫL/^T Y-*viubSGu9+sԝ^QՅsm-%Ӡ$s='HPZWW+P9ěfz5F>ܜԯ30Kdţj9+S}psݡ3G˄lB+ ,.HE&N\d6'?$n9dz|fUvi 8se 7wW;\]sJ|y nN0/2A͒ۑRٓGG9c瘼dGGr24+=bآ҈2QVGoA "l|+UG]JIPkca5]+Dq8KfA *$Y/x"O ;ן[u 5h6) " ZAMwww7!rPmnz+y M͂E>Hz dY~닕/%uUj*u2Nxkvay>_wS,_2l9*#1@^+Թ?>m!edRGur^Ŏ9 }^z&S";ȟ3nmϫ_qxPzq&/E_4:6kG޺~pTj~N;̰;kఁp!B49x6BEݓIՂx}*zp9q 7έR&jWN6\ d`20ͬ ҹZ_Ꭷy*a=:A0;c^IF_0 o+`0k u~ip>LE& BM{#Aj:94P.4М9[!~t ^kt9{%n_zw/; '1JO>&{8auuptHt' i끒svX6!Nws}nP7&6@&z޽1Ot .Bsa  o>7W7znү.G n:nq[nJf'ob͚DCO9#a&'~$ R'9$5^"v3kh(+Ҟ_*xHDT{.pdLW'j8Y=z ]} Јb#5j6<~ID.nH,L몌vOUR1aUHR6JnQQ 1MH^I旁fQQvkPVX 6z*̬{FQ'Jg_~Þ&rmk39Ek(L2qKE_pyJWk0s;dG$} 8\y^q/S_$4A |"q7[YNSШ [= Є}=a sb`_ΒBx3RTKo|> JBm)M#01YG45G!.!uǝ?)Fi;)kx[&߁2Q>J.F; XnӻzkznOQi==C^i@/]fP[3sfv1'϶7= BxR 5BN7ܻT@29gE P \`-v (a&O&,B9<JMʥ,J"_f[b Ki)[PԹarb iWĆb k|3pNGWsg?q\0NBt:믌F Aɖ z]șЮNԡh zo&FVa72aS7 fYH3Zbk1yB?L[I'kڲW$x\m32\R8(# 1JϪ\ጕp52l Y}4.'nv+%fzY/9*ect~qb(=!)'!3]9|R _Y¾(PSur%:r["J%_'(s o8&PףFg$#o+7qñD7߼+AVXX߽oH\D۰Irڏ7߯Rq_N0#<) (D0M $O޳z ,+61kRsIIV 3?C![N L"(_7UAKBj ߸vr^t*^M$S:fp,h[H3ﴊߩ´}[FĪ#x@%cv0Z@= (%<53&FZ"2 H2KǩtzpgC,S@9Q!w1Kt'EJވԤ n/|Fe'[58iPGb?KXsS/(I$vW?, v1oF+=ztMbV9xQZŤU˸)RøЃ>S4]B|1koWsomuwgxB.`25.:z vj- C~);&)xpt=;07l "sZ&5 * nCAXT~|"wCgD"YS!O9h6% Mk<)}µ}Ӕ`00VuiCTfZe9^1k7ӑ]H=hi5ݟ\vkG$)x" |ﲥ/-$Rx!yHŒ7xhϔO? wMQ4NTLvR-F( =r'ISR[u@ L#hx[A8X;^*,,R_>JXF/eΈkk׭ ;y 4cxQŴY$TQ;aِ>R;w7ǢtWwp( _[! Kt=]c!T2ϋ%nfyphKC>4U5mh( kfAj嗦5^C^t644 {sl\9>>*t" %6!U6BR)%@_6:Z4Xm.8$r- J:Xq[95_~9`A 1ݨAWxj:uoH9 J;m"B~A3ukmϠ(Z4 a"M 2Fd]kk-,`U`9^Z}xEZfQaH8H̟?D>ĕ D B;4Ez ݙZT9oT`5:!c$Z`0+lCЬM(Y}w(ՙ(O%^:G[q-:28o%4tt/n)'=Ht (s7Ǝhi2fjAE/ǚ;!yPRujY#4"bgN yH Pf͘LsWj }G*!s))酌7l݃lj4ԡ*0|>?,_!0A%6qn҃jp^bʻN".@_dC&6AvVZj$`Y pYF-0^H!AKހ:1بWkn*rܫh+Ï!$GaL20 &ՙn9(vLUbͿ&jK,FCsWN 9 989\Ӭu/kKNZԇ©C5gB2 j*%/=˥Fఝ}yv =~/>ZGm1 l VE6iU'L!ĸL3P=dy6*)Y^ uPǡ=8\$5!)%DRws%8ꀡi]}pЩPIX{d2Di)򋴔Y0 :4r^|TT3 ڢse1G(vOi+~'Y~DGq|i`,R{:O-apY aHE>kxAx?x_}$%x!]ce@aP)f_0t{x@9)W?hz:' 8ZhΣp pT[Gu(~ߔE0euYa JX 7kd Lw@gYF 騒~(xJԚy(پgHް! p 7q,8H 7c"E9L;!n.Vkn8V%$U{vd}  /,\Cv>soLfҬ=krH˘ZgZ1cffտ=םubt vSx9}\ˎl+H)Q9yrLQ{gR|Es(}|`0ڇcвT™|Ur2> }gNV!C"_E*&Y8ڟ4LIHխkڞ;c 5M qYPy{0Ln+h(9޼`n9O}i[RjF| WI%&/;h.H%4BBMْg| 2A~7E|~umyƢ&pU K:lrLiF~_vᥛ0dDuaN#8䢳`{'p}O:r(1 %Q,v5hc)vPk`}L?;,Ĕ @bܸ͡%<&dZNu0h`Kq9Ϲ? a+/ iA t=z$ 0vSV`'p@~ō70H2zZ薧= sѓpap#=AA[t@V# B(ȗj`&(+]a8z*%"fccg*.. }?qgCׇ%&5F1Vw+mtp /:RFZ'G~2(L56jLƄ8e^cNd:Weio#Uҧ}cg#M|˫7i˗rx;u-d RoFVON%(-y )ly2$!Ln?=}$}DsX[U9Vܔv2xav/#])dN̉gǙ<;"e-#xT{aX`߆=0jԬzgG.V< d=^rݝyD9Rzt3KuWLb?4 3j3Bl|8%|OaKb Pe9nT=i^jrhbƷ}GSӖ3 [HSdCiAo ɉ'~Qb`%= X^x)Il>`ڟ٭ EЀ.. y mč\>1E-V4?U#l`,5jwdwTjܣ٫ ks1Gb{{BqհCVyBʳٿih<-Zb,Q*9a)2 6s^VFOTJx\2ϣLX5 $ FSl8#a!ȷwݣd%X4K.zE=L۬r!/x3D^ϻ:sJ<؝GG⾆-'9tEC{H%Ќ yq9v49piNM '&FdbYEh\" f10)a˅E wD"s{)U_wAY,ˎ4 dIcJVs*#cT@DisiP{Qrv景ǢT^ֿxz`˥bSհoR6o>QMy^k'70Hp@7*"5:y'Bv b17qqݡ8'_8:νv&Ub|.]M#yvRΫQ'e3~=KdL? _ _pw]!F؎m̀_"UaI7ǭcy-(07v#PXY biB>6G/>8X1d8<ܿUpᾄ`x^ 6!tɿϲ?҂<4sC)qysry:4)|mXfz[ɽ)enl8,2@$L/R=j0+7[sMM?ZmZglxYǀNl{4*dJi HɱX3szXþ eB7pӳP)T-HSDs|߹68}vka\˜ 6netTtuttlVf@MJb/2,m6&}C^$F *wC Sq Lx/]'7|EWE]-( gRNΠNoŗXm%_^P\ҋѵ+Vn֮B/!ěб\ kߪiwط3`=÷R&{铘xLy0R.QZĊ=|΂+m{:6©>)1 $CoD GD%V>J,ST =AHhb!)8SWL%.^l_0о'|~6}WN-$!gAy|1kJI'JL'%wsQshHbizο̤lIhUB&&v|ɨ̌+37L'ť#a5|լJd-\_\Kv\,5ytǴYVq][Em: iš0f%=5fu\], avJױGK&s}/PՈLNQKHBcuU/wͶ 17,4W=G:]/m9f\zDA8^.Xe`[uE^l+=>C¤ |yq2 O ܈")D1g 'yM^WX/J~2pvӟq@hc`܉TZX*N /([ C@QUSpmm$GoM7YS(.yxfXؼ [ z-yXmy4l1'"5MnBOmGGp>#,/xb#,;U>,Q0x3N}+XhŐma͖Se*ڡ9 0K<8*lCtJ㑽ܴW +~)aU^sa*5t9nbsWx/P@mLET.zX47l~wMoNT:_ٴ]0V;rv~,}e_.L]Q0ຐJa%#}t~|ν1dWѵ1.9DZUb&;BlEchao.'{F[E&ؓEv+饴_4%b0uϋ_+pKIõ;%0PDZ? 6'd~n=v{J'8;)4~p@hoCWẊ!5b{]Wm4  q,ɀ܈?sc>I{[o{b!7R<-˳pr3{=< 8I[H֩4Seh`8zUۑ6cQHCfW:P#ډ$,`S|bg'1nt,\<~ktW]0%yp=PY8P>[5r`wJXн׍+w YbP'.U _q||huO('X XUfيץuMtOϊ KAdAu>jCZOӴ@ő`ؙUľ)#<5; gDN'Ŀ(e=eoZkj'*@qḠŲeox c9=߳|xmaAr!^I^SD*& 9WG↪Dq8ɣBVNJ%Gu2N4Za -y C0p-thGxEyhv=#٢J*hGZigαN@7 -^M'.IEJh sڀ;5oZk}_tGLeumdQyՆLNdlK@ẗҽ)9Rbվ w_k~@z o??46=^.P㳻%˚ufe engPk!|Sfb<(,quq1F̾\dq,jD$;|uZi/"Hbф"7qÜ KZT1 eSQ2Sa7G ~ K*q%6't?Ϟ.\Ѹ3j 8n>邆 !2ni.L 6Ee=3s&iمx>9i$Dz٧erЃKYZ">Pe0Њ1Њ Y:GȄmɃ7:F'UKJ?v?F A}0Lb< }g'Ny7I9ENRӞKUT$T7>{GbYRM_''אb E*1T yeFW ?Ĺy&0EpH2Y5 )I)I\!3+f?/~~z]b% (+eɒAsV1PJW%]Tzt-6jw>a +ܺ> ^D{fVK@ruoo  3P.f޳!K=]|i!t]򦯪j{ZHn00!gC\?Ej jI!7zࢰYF۳; w]1_z f#p8COaw Dk'gG!:SS3gN*r1#Bjᖎ AMtJNOQ2R"O~A{W\p>(Z[.fWP"0ěPrkh7nԀ.YRiK#p_`[pAX+(_[J|zSR=Q"H*Is Rm Ͻ@6M%)NI Ɣ5fA⋎;(Snԫr*!"A9)k `4*8E:#ё4.c p QWJPNvjfUSՌt.)Cq͆OU0^4WSEB售g֓M=T!ÿEgHDӨkݢñnRW r@rsT.y0|GdWpng˟zT.Mʂ/H.a)) ]S+S1pyG`, 'DZ?Va"A^$RTlWZI[1^l/B'̀ek("!|uqM$W<2+2bh#Z8} GothmvP勶Ą~5p.(³E"00 ۍtډY*Fu @;IyK L ҩ-=l[Qc&G&uL 4$ r\ Ә^vRD|6跍TBQ~})`/K_L0n6\hDF'/gk/}r~`f9fqiܩ0ı$I{t8&icF^A%^R$68;=dYG1_/xϖTXlވ='"o*x^L35LR@pb>֑=By-Z!X=E]UڬʍzYAM?bR.3H ❁ࡗ1D-KlSn| bUM9i[m+;L(.y5=8cGʜ3:* wmz}YpW &׀.;xs6PL|;|B?c候A b.RD2 [ *N<1J9&\+,Fa-lD:*:yˇ# 7v gwͲ$n^nZ#$jC  bo _n)s3ARb[P!oj PSkR9`~n 8rØ|Д kОfPw4Ma3u)*j%y}Ycŀ;K{dg~OA6f׽P2LYqűxvML\NCKӋi>$lyg0K5r ZldZR]ggM ˉBIKsޯfX6WTp;D6 ϕ9mv,cշ=@̳99FQ]:DcdWnnfG~+7ZԧIq$&%h+,h J^E4]1n@ڸxǾXhQRk܌A/y8~JtTx云RHzWݱ3Y#ôB0ĺ⩏kC;.6觲s+ -t+wvfV Kt D׮ {p Oץ[y秪cZMu!8XL u*ss$ o𬝘᯳}6cY9wfY1ɼmC8op-4Nہ|ۈ~ lXG"W_4'9D}x>xe^FnVav aͥp *D}n4I &N8; DNn DljkW@ޜ+^fϽ׹gĮ2ڂj -%᭪PpG309Ք= wNg`:<h彀-NI-5#x}_4d ᠸח\#[ YS*sۥ,T+X9Ho"NPk5d)Mg62SE':B=/'CǨa%L jAF]jSq¹hwe&Ud"1¶ :.a%.L4LV|8-7 y\0sjdf }_IY]@ "f5|N0z*J+Br,ƨ\] XUmA3Vz.h@ 3m K7XV'ۍBrvc: ۖ$\=( zS]sDjOgn#?6C M@ND[`[\{'g\!Kv{HSx[~Ӈ2g-B#2U)dd{W%fInoC,ggZv(+#$%:O)1{"pqQ$MϺ7`5 bEXp:>' j 4֗^PM<0/Ȉz>P} 7v \Qa!Ya9 $* Rsy8d@sM*6ca{S#;=L 0vlђF:clK|3A*9#!dxR%YQlӻ u$a;7U:x&{C#IbڿBV K:6f3O3ծ«SC# ]2' @)d(npKk(!25|,^{]y3 -dNBXc2Uص1]Jr Q\&ń()=koYU2Ec D̀}=1"kեT'0GΉmt"؃<FqY\b|<}ߌ8+K6. h9@٣y'I҃cƱi{d.6NB;F_֝">+*s6*\0>&.};rssL)Uwvt9Kj].-oF ]?^H0nϲ [ST?<]gI/™1_tPɳV3, D4E(|;Sfj'P㠴J+2'tHHaK8u` q!A*FNAUG6vQc tQ;A}`fZx_S_ :ٺ|sCk'RW,$ެ܎TsLW޺I?+f$RiZY;n~ WW${>|OGҍ&/-,Xo}^!%xUzʿo#\ V}4EK+i``Fgh\')>#{,U_MJ3ҋ)8&v/}B򗐀D69_z PNWkG'|W\4&MZ~q U6<} suuwO*XaUNm^jQthgDy9ڿ mPq?&8١;# _Qݣ XbmBӎI-)K~4MZx,{Cb]4t|5M'(J)oL}rt>(n~߸ ٶLcYD`QavA0tbSSGQ T:` Xv 5.0qȟHeeu˽lk8$Wuz8(ҳ9 ո\ӭ喑^rs.f'#WɍR d;ՇL_&^s N="BJ[]OQ-ułż<MKG7ĩ린6J:?+y'&Z:Ux#wo=1;5{u)#g@;>@uM~B_G?d8͕SsVxD V(t^d @zRaO%UN~aX #nr^y¦ BhF.牢m z '7r܊h*ΰspXn"lJJe2Fh,5ON`şSH0A-ADZ Źo?ImiP$/N|RtSX#%fv6)旇YC?bz_,Cd{aE2$c`FގR9$myLHf";zhiJe7?CAEsjNQY>X]Y c})ook jYyjms9fq4oa{)W4qkǶ[h'J4ʕQ{*.c¿gg3 Gat{5^9" ,1씥wS>lvNM>8jͰ;䏻(\9)Qx c,HTN$;Buaw&MCX9F>LD AE)?*˕}tQ$_f#^B]Ocf+g`ͷ.>2p֬ږ"-SaXK|fqw059L/yxD͔F O~?"IɌaYStƺkrGU4#aP]. PsJ3r-*gv*$ <~|r7 †\]:pSo@[cX@GӻWb|r#@k0T6h*=21ǂ%[ 3 \Bp n@?l 7L5¢ VDa~Fk7WBũ0pȲ1իb $%\ md\j[ J™bU@23Vfna], 9(᭳Y|A:8@F˂0CG^adDž͒ЕyXe{ (h-;2aS|7Q_?J $ww/BXť|Dưj);OL^ˁL@l|x)s7_TvӒkw1#[_#ioɵc(A_&B{[O@fvkW|TxAWSd!7WLK_U,|KusJV*ֹr>W$=$* M7vhBρ窵'dq$3K8huxx~W3T攨yV'rjg-# /KYMt%MѲ9!ZplQKGE>8"Ѧ l!w^Nt3#b3ٴՐg4,qmJ&U +#FoM"yUjm^S< Mf"CUg2M-$^F0Ób?eaX\$ݒ@ZKPvQ"}ٛ->N"cÀ#TQ ոR7mVsi%tZDDqIg|2K@j0Xy_5Qlk.fGY" :jxEWߡ<>( 3-_RaM%9u_*"& và.{/SaJ ~U.)+;uHf7'~ i#z φLdSKɊ|d.'ߖVKG,qT߳m#@6ysksfQ]nm6[:;zBLkm4]S6>W^b°;+*Hov:kJK? 2뙃%;0rָ}uD. $^}ܙ3"ba1P#Ȍ32vf7yl(h+7>ڨa3:Db} nԺn) ?:rabP+7 Fs6%wDml#"jj+A6Q"@37vK$K`6ė\BE/1y_=Z70TnɿoX 1h1+q5OLG1Y@SKEzcGBEh{++v[ $hhoW"5 'V$b 1օ#⧾I9#@<}  x`SKS*?]rX"Ns70IxAi$l`xΆZun :neGܱܕ1&/>:}a S֛bN͑&28}Jf=G* q bAC^ zR(YUDZav^Bi\~ ²Dse\׀EB#vrE Vݷl(AXp]z)1Ώl#b˹PJgǡ 'm7KWMU!|lS$.B{=X|j)T1ۅXQpL, rÔYؐƠMkYN8lJϭ-F}||x9hY`5swAB⯔- ar![ ["qX9[jc;I2Yf Ԧ$wa;^E'Q'H^g9ZO N9Wul*8MۃPuęį΂0_C\m|u}"CUģC g^n!BRhTNf>~^Jҍ2koVk~s_4R~n@dx[GTN"d+qN~p;_:1#";p9:>yL$+q[j>GY#>Zhe7jVn? *9p4Vx'3 "G* jWA/e›-52XJ!fjplD\ |^mmTghyn$~tZtRςN|V8!nvΠ||7~J.k HǓ_ t~oDfcã)haD4S]/`/ʱY=ϑmdD l 찹urͶpAR4;M8^/ "mNꎝSW,a>úՃewɆs HBWD.M4]DQ-f]a~..WtR_.n2w==Hx@=\#4ڿCT\VTG>#0O[F,r@!f+IxhIT o{fAxwx:gHC@g[B?M_=h9dE?q H^{eslZc;&mQU'!(}Vfܤ[[R+WUMnOl)ˀEE'h(DRǜT[Bl~(D{z΢tdBLApCf[kJo|u4? Z &4Sk*$xKqo@v13>Uuׯ*@g@j&i0!Б<+jl=CN8R2Ͳ:?6K?0`o#-.y;Z9VbSJQ&m>vZ$ӰXŽQ\gǰR%ÎU|MXL0LF皅^>0Uѣ٫uݏ3*ԟŎjT๟tޔ< '%W^YIqͫd+qlRwe,lbCBN˚:rHr@rVU"1*vE|6 Tŧ"=S㛏R| Ta:o^oE>(mea~Vgh Fmcˇ8X~ xA d)fHmu724%+E(ωasǏd0j67\^.dZwdzq"+YbK:~HAm}ex'f"E8n"6@uMEhh^% o6P ؛T ٓH Y2>̧PޢU/ "MT¸ -ISb_?j`AsC9Tc velM/t5BE.; L¿n&ZM7P`-ˁp(=s㞈">RfC[!)YX]Gհ 㻑F~r"<.E e]AH` Q@me7VniotR ,v &!0kVY+;8_X)v`wN?E)͠&tA9dYft@k7ߠc(Nێ9Z~ ɾ]pq^nLTC"M1QVBvH uBt ^8]؜tF7GwCqD]@ ^t k [ 65&<ԘG5a9ϦoI+ gR斾3vc,7!գ2`ttLȧače΅eFO?dd)Q5j(!"u=/oV,BgQb{dͻBo(ᤷ7H! e(]YTrQL;NJi݆c:&Un 6ߗ{2q^~ Q!zMj+1'@Cl^]qۆj$SoC$ܰL{#h==ZB`ɼöM5F?$#&r4 nˢj>.VeB{![12-P4{aP,cjՀy~pI~Amz^)2- gb߳zW.@>-X{C+ܮ**AN._q@ ۢ77416 :6ڱݔlq nf0*.R7hrecFP++XuNR\vPmE'Fp)+JNz֜v *EwʹJNN'~>aT'HВlXHv'8/6M٧iquD@t F qRY ů[P8 la" ˀ FLLT:ϭn",K}UZ!{wH]"arSG:u^'kDJ$Ĺ_d*@ A#ؐv0_KvɃ- T [>iU *~ _>AZv[Twd +P[:P)@G!)u>wv 1X(_H\FCjD!Kc\^eNu>^ŠX,I# gu.l_e* ؒ[2H. *n8>`z,pnD~HNG&jnݺ?0ۡ|wX[7 /< (-ncۥ La;jmHEr3 SUmo(0kv3?1 YSt˞1:!g:*WP_1"'gQ<'LfEeQLJ~MF"d%c^X/xd~˙.в\eȦ2Ca:_"#CFD?b[יXpזE$M 3}́b Ka] n\NSW@ 4V&jRěo:y{T{ezL{EdxΠz3\WLX+\gp\E2>yD$D[B~=duvd(T"겠ߙ_~l,FE i}D%5{q<$=xPl/K3{<:?%ĻOU^xA1?k=4N8],0HcCUpo5>v9H*_kO4n8n%zqr-ώYUZgϐ|N+ >})K]qrxɦ 8.=;t(~G@xpRiTY9'_q/[48Q9Y8jTXf~[19VtT'ܐW-ƁQea\foѓ9T +"tPk>EFS^IM uoh8[?B/=Z(lɔǿ]74[>xB8{ym& t\)xiLWhHsy ̥@͈Wc /,Mr ʦm"R•\ ^F] rl^2i=z@K/C{F-V ov!AN=}{Qa" v##9ʰE)P$ _/}؀(..8]s (b/ cb1NC4Y/ SfƔwxKim7Ƃ}̔*c21 ڵ~ȍ0,>>5b;VRgK(5VyOD/exT:D(yk,Q%+e9n?wRR/>= X甊_uU&8 -1:K]d f5ψsA5?^5\hȻn94^gxi"P9"??`G%^K8,K/ 3չ?>*M1FRl\k^D+ L=AKM8IAXbX.ֆT$]ǤlR{ݙt=b:rR?_HKǯc՛^{M$W8%K$JN@_*h(5;<{i=A ܀dMSL*Cp?N( & c%XV&<[oo<0L)ZM#mK2Yo=R>) H~l"Pq)rئ^~>Ie?(S G 8Z02V7Nb 7ou@}IN] 9~4A\h;'V6SٻhD>M 2cB=G6_ od[N"t9FTeIY6ǰOY:tS6y^ eu;A~w >ڃ^~ӚN#!߻+]s ~G5pfH#}5M LjO We;d؁fEYqȴ+VhS_|f$LL%o=.c_hY0[v˩F C <߱i~f!gz@`0#Pa)UfF $$UT! ?W^{ۖr;>:MaVxu@JOË l9&E"cvVQ 2i @FEQ'|oM3'8NXuUpbK4 GEN$@_ҠAxa{/gJGkiFnf< V&8Q r:?WXW'AİaS^pq؋8<+l¡Nx 8w!/@{+Fu ƌ:a kfZfT]0R>ܿO4O '-VA.ܧon#N*R>)VR"ȲAc :>d#Z$t&gJSBIqi]G[XTW!AyF!qMN ;#\FvP\SNҹř7\s+? *5=S8hi*4s|:>yCx(-DNBF?N+u֦3Z_-<Ęߟ[g]kF Wc|$Q.V keO]WȈ䧮$M`l&A^ԴGN<0׭m2+v.ܯ7(vUՇ#dÜ^ؗRJU_'͉ΡVwN'?sJ':F㋆Va %SMj+1Mz<옍}L8(+'ؗiux."WqWL|=DF6-۲~Z[Lm{UVhVjZlʃ4EPISAq챙BvNp?DuѤPjWKg̐,`|H3 a~nkJuINSwK@hosݎP4xA~;93WRP GiS`.'*jeؕn4Z](.[`HY`"js&ھjOQ7EusU}lR)>ut.Ǒ#4.'S ̻ ⦛IZL Ai>%KU+d3#QcpޙqC1ԐTe<ރT9iQcyrcHLy6C]O^*' G e2,xws#?9H\I閚o~$ qp|U%h_DAPaciqڲPApŮΤӂ&50H{XSdg{1ЙkAm4g-1/ܹk5D4rS\pC?%h(EB4cs݉gGK<b zt&3M% [Ӊ_|f3n' W=ʑ)Ce홑*-+y3o=UWΎJf !UI|}Cb+X'Κx @Ld؉fr4 v\(8?r!uO;K W#v)"n,l$~&.R0ڮ uÿ]杙E;@ih8A Z-zdS/xy2Z&TixdgeGþHBϮ$Ϲ9M`Uzv1p ;W閉˩;>}XE-`1+$!ͅ[ VUP&\If6)$'d/fk5U$ׯW"eUc0VYdTzڇf3*>%+'x!3S!!9enܞCX ѳ2˾(}gñ'0H.bQVMeS(=BRNO<S((e;f᳌讟d&?w/8MnRQJz!%6hh 0ݡCkqNiU2E`2$:-q>,˟c,Fzϕ@Gb JGɻ̕ TT؃z )ۧGsn a/)c̷x"oCP*`j3٢ ثl>u2ʡ\`x-DD7r(JRBp tfn5Y,ȅ01ƭd&ic < зN?dFgGYi[ac :punh9$(|uS(!vhn Dp>q*\bs@v?s͆p5U)qf *uӋNի00϶mjJ2*{;dɖ=\>Yt=_w ubp`K|h\a[ěpc[qSs]sMVݎkgKX\M #ŐۜhcL?Z-OMEW%|s=aMY3nȻiJ-j{owx 8q?]#M}i +tY1V.d9\Oӆ/ߙ`>H] ~ pu!=;M٤KFͫXx<2܊B7i *D&@u ]dB인R9r9 R:Aӓ>+)r&UWˉ)?? Pk[ kP7H,= s4 i@BblMѴٽx#` d4C k`Qc]d{oY yH#"opşvDz D#]*JsI >wZm-2F\oCy6;ږػǔ'%tր-lK_$4g 5=| ȶ_w  Ɔ8nkˎS"w}BNRcm}A΀\5Ȁ*"gvrϓXKh3@ት0R~{-atӮyRDrfj$\ƃA0{,XwGK6A0i0N` Rۓ暅!z)}u[4>*r拡jc /i Q}F]1_'x-mkQ3THg=q㦬J;y#Tv$`OcKtIv(hy{Z^g:+7qGEBDn[?\%/@rNJ۳Q4gxN/d~;3.zjjΥH폳FX&8 M= =LjX\e$,z>d7Cx`kShӚJ5~?iy A ޏZEiM έ!rwϰ:Klys] o˕~o:8q{iNB#}AD4r/_g~ *7Lf7A[%\`.B]'zW@94e3,"\׉Vwf2fƑ+>$=ՙ̋N#Ni?p+/hBTRԴ !L׍omeD|A6BR)Te*v6ئ umK.)nu| IW\{л"e rW=GG!M&mt+܏:g-EOQv.6pj6*tqڤW#d}'oNa1/OV+2fJ@94\& oR%<`˚,@RęZ(@(E(b'",U%S7M1gms6.P:I,8__Ͱyݫ2~WjTbsH>ׅ6!M٭n.'m>6S _я5ūO QR dum D`](>9" 5ᰥ>9R[%I94"ZѳcJ#ke!4Uqd):"c׫b??EԲ^>@ _ׅ4IWf:ܓǽ&g oY@i-Ґef ):1& -j\HN2^5xynK |v, BVwŇ>97EsfѸ[Id{Po^tݤFԙ?3] :\1n4>A 6.+A> "cJ~M?ϕoW^!zea~`@+81Dzy8՝{xz8u$D-$]5♁gתE4[^)}zyo2S QyNK5ׄ2pWgs9c_7$YTePd׏ X SP;$~aU89 #$-$R=ܔ. ÝN5z* OLf5@ln-ɽY0n.ic]~MO~[ߌf"E߽PpbgQ7a CCq 4{0GIhv p0d~b(wσd89O;Ajo"cX.?)u'ԮV}y,k] TCרT=lvU Gu[Ih*=]hGYpyxZ[IQuǤ@rRȈ@{,tAO @aX P潼Y,n1z] uL-ȺzcD RF9/8\;m!ֿl(9Vx^o_SJ{^B: hΟ`8/æ6\mvKS@(0,,wZ>Jz6k Me3'Ʒڿ#7@`퉗A"M: >I^2BFS7͎o6[v;㙗&P-V\:ff2Մz'Ɛ!s23Fв_GVgZA p² 2Gӧ{x:-)_\f ل*H" @P0-7,d<._f%}߮8eDsq_:ͯQ \uϡ)dqm`/pbq 1$*V 0S pⳂFۅ>E[PozV9 3t4ߺJ |4󝔼`l2IFQ"e [y|;]qW<}6īOOP`iA%@b;2bRuM#f?>0jV /c\]HV-;hq!j#ic5]{ͻ'⡷r_]gxe(ͤ͐I=*(晕NnvV=W@a+"`N׭oIF^w}[4e8W_aty B?o.WXN]<,A6*rg[7(-Y?E6`['\LNDd* YaR(Kw6%r;g0)VPj9p2\^̘\8ͬ)1R\r$˺]&,<L8OLX׷󐼔|C1W{. n>t&O "'Ѱ2z1S=AdB<7.ya||*$" ]o?[RK8íg 굮W.]OUơުT^;6q{uLH{,[#RXzrKl4Hr5>"le,$TM?{VĘԈUPěcW*Z$]-my]\PBD$kn1%ciK,~k2$U. M* z@lZi B\G]fn-\GljW9vʀ2ͼ|/l:]VUozn˥PjTD 9M72o 5,*> k4 s?Xp8vG,:`篖k61Y'Ii/R(zg ́wn~c<Џ{lcK9A2#e'P{{.#Swb H^W)V.o!0828,%P¥L"z_ua݅O/_dApkEmyYjd .wFDP-)=`eQNUJvGVz`HeTH:w.wڢ[?kٛ40 YhILF!(Sd͸an`x= k[[W_1yq"Se?Xt;c QnN0qz3Ω4fMkc(N2C{kN79f<27~: A( ׿%\y+'U٫X0ѳdR2S@37`B|( Ѝ,Nm#Mꩴ_ >p56Vk:[;oG2re_ ?翏dxk)~rRrrjO[,ic| vgu†E)=e!spG_);|MsDٴx=Er҆0 ?\'a CnQ)j9o3,R)uouþE*aƟ62hC+D+#O!8  R Y66j*'k 5&nS_\J پ%ϡX}|rʾ9+E*V/~ޤ!īn)<~_8h5p󱉜2Rҋ)EUêvpC b}<ކ}ؑ"&& 7tsT}J^'$u&y;{ G:in<0Ͼ07Ư\'Na5{Pm +.Ɓĕߣ0!If]N]JiPtI|  IX\ WtqxԊ:yf0EGS`qxCY(DB/_ڷQuM1qeZ:P{dΏLcܔE뭓L͍7wSkxX#ڣk"r=.3)4 ˹wBwF833K&=!|I8N?]a-H8j`eBwR=Vҝm(r'~1!EnR=vTF\dT]CKxXY6LGwlЭ>D͹i/^8*d"L$Tl8>`8RqG;:t|a7f%R`۳̔9zϴ%9._|MSImVP6^muAZ@BY3ķ9Y؈Щ+-$$Z^jYMfAs$Fl:?kש#_F#S;]Ӟu!qc*٠Cy2[#Hr⊁XA( ^;^Apl,쎘4A!bلP8uT&7GK-X)<_\c5/'rBfSlz>E>wbLJJ܍!QfCA%uh5zuc#XQTe q)oUI/8jb)Vh#s;/[bp?^A*y3x<K\ <3'Dz!%ZlFDUmE _\j[&",)"?!NjZd1 :V/ZE uXr$xɎӘ)`v+mg_}(o6*!cGiɤtX5-նdBHO9} JTka;.P*hJӐgTHls6ru_7a 03n_*1kF@N@a~V^fg'K{L('{U?|}`$o[Mg#_zƽ^̪!j=Dd'5X7m0rY^(eP4ѷ4T@ |៑gʈ5`;auڲG YLe\S?RAH,Ƿަsk˚f(uswcu=ntci|MD:Q"M,Y捅dlqy||mߠ*5ͩ=5Vs>*{K{W &iACj^l{x yEaLQnSS'i*6KVOOupg}E|4(Y>BsXsH`tv?E>e{IT6{9+ @m .L*k:Ǔee[a;:)N9vHNJn#:*V0ԡ;\~ĕ 5Dm q~!nmFQA*Ҟ9#6PH0~E4x-K+_3Kv!Mߥ3-`bhj'阧]x;@HpU! mm[>C$+z˰FȎΧǥ)/%'~?9܎y &Qk43lsM4mqERep];ۣ~]ʽp?wgbAG팉B|*-`)nd_ eml`nPLXP5],*%c-H&BIL~~e3YB[y'də3Y"hm C+']d@k֖@r6/ty#ڕSJۖI[`7hD3E%RDp~,!٨ϖlI3<&('`~[Ni`m[ƾ"#b(h)YUYQAm OeNK/&(o}BJVV Q̅v2qI}fDd;qXu!1+EG:eRg#EB+Hvd.B&[u&v%UT@85Qa-)`wO/luRݫɁ)2FC~D"r5c.jG 4$SS%}eC50Bїm $ ;ߋYG"Q{-e8szu[,T1 9Ɔ)]=J@uŝUFm 1 ]H*%?cޚxDN8o@D{ْTFj2 x+DRGKlB|n5z~=!5U u~GPM@3,;:i;FJ] X R,aHXMK FnG.2t-VMH77ZPj:W(BN?Ar -GHEjQو.u(7nXV=( Lz&bG4@2CoYS$I ~)HrsΓJUr;:.އW)A(h#SuC}DhF<`+%Cj_҆m#rKl^h\O`7VWgVHFvȟ}u+{kQO楝̸cPg,swӓ9cԙkӱasX)5xuίorjM3(h4ћ ïE5r Cfh > jٰcc>u;׌]NEe :~t"fԶ OՇ!ČoE槑4E[ AJ!&s'Iqa ܱ҄2>l梺Wb#ܦx}÷TlS:QDݼ!ZjϦۛ1>whw.zT=:pFia5Nxv)&F3C8@Oڽ;N>?5:!0&OG)g[ȕ3.zk-óY//E*c8>G({|q ï_L gBZ!BV0 &fiOa#T|&f%]jG^XrlCx#]oCBԹ.WJ iEzτ% *V# Dl6&C ]^\A39mtN$)/tUKJ]dV6̣;lvE<5nvճ鈱_0粐b I4cFOh/RJk_q)SLd ޵' dmr}:{iP֚>: pWy9هPo\ NU[|x94bJªè[a\=|&Zl);q \TXr)bJ {B,Ts~܏A%y^iCg_AM 4DaH߲ Iґ弤  i2~t߭3Z[b^y.e?)T@)j2a=yiCKb'6gBw_XT27uR#[H$ ZT-&|6nDs-n]CE4ti2iMz̤bC.f`)ɵm#5͢mAbHMgΆwGO#3xX'y: 9KE: qR*jh @ hgi}^Cm|'B^&꣠v"Ĩ+v)/bTwR. }Z[4=9< %h(z7RtYߒ?*Pyi~'hiΗ@RF.vEײ%ezS߆cJ]ר cyT'S HWMpѶlbpx+\h6^C)鷂HF^xk"&K+< _jVkVaTcli1#}^reAZ>4|`â ܊]y{'A3#)odUnߚm kş\IHy j,؃ >F@ Q1υqSĿB%q%ŧlj6~WNe?YtτS|б\̕JGMc%z0R:e=!AP7`ɵzDlB E%DU] &ۨjGgΫb=AYнro螾>yϗc@F-]NSM!pM|yU3 QHk NSXh)}(>r'TBE!G  -x>bأ.EeVMTwMrc9 KNqs)v ¨@ci \rPI;A}4Yծ{K8j2WZ X S麬Xd?Ȥ06S 绠l-[) nPS]_Б2xYv5DnymʻCw:יPh:0NҾ ܖbLur&:Cc 4/J,UȕC0EͤYRg3/W»4x܃/Jk{g)kCDvU/ AXQ2â9yRk4(&ɢuc.nJeUʜqSőZ*߭ߨE9YcLYi!fRlu0ɂwx6:#yFeEIPqY$+|&?jA+9nk8@eA8yzM_/ (juN3>xZV"'(W$eO'-!i5[ zW]{shh_+2 rdo$]bev.ǣQWm VQ䭄 Aṑ>R1%לȆk ֫c2qR_˜/]˝lMi[/RN)zX?+vxXI5+%.1`sa\ ?)Cb}1<M†<,Ep2i0Ɛ'ksʂ>c-0`O&>,R ䷃.M6ɚU ]4>I*;mSR~jFyx5P]{`e' "omquC> W$. 2f|MJS/,<;Tbcm׍3Ip(Ter~ݚ {[MQh7 UM < \3S9JmuQ.Fm-ľ}EdƦH hPVu<+G`yJSo(Q(ȿ7y5OԂt;RcEISSjdnU>yxm'*pAZ'bpzGCßr# KoUsB;VjwFVԼ*\QFK^)"|qމAU4Mџ/W{-ao ىG|'L;eueG~ )!SnwsJmQFt5@Wϻ~68y*TrDSӇf9V/ ﹵>9dtD!gtQ\;(AlǣYla#dŖY3藃!vK7P47wdlH0n )j䇋h'1Cj3Oȣ4b拕hԱ6F ߣ-rVwu5,px}&`o 5bo ԇaIGF~xgqe+T%n`щߑ~${j)uggF^_FMA)q==E2=@ל[CF^&iMu-k8GzⓍxn}(K[#GIZ !C6қ/R909+Rlryk:#EOn0&(c8vHkqrƚḊ SSGnэ'XT;(}^^8mҒ GU"4"԰-~4> U$`F`t.@AO]-X\7pJ=Zg߮')';+ mQ)ݺ$f+ q=Y=ZohG6GG;܉kYDHnḚLe/3 b֛;03NۂB [y+S̕R Z#j,+7rL# [ "73tiY Z/oB"sNE"ͼ?3띒K*S}+ A%}friXM:iwDW,# ]xdIj/lr°MԬКb)r443Ϭ!:#cM2U<Z+5rs ,[\|xC5z"8HU։=r";}#_B./ۧ/jV?Tkn  =JF+y)NFЅ s @ 6BYF [>‹^4?8+V};Ĩf['>RHfKVWpҦpfzfF!w`⁓fI2 L /G~+C A". %,ƦE|y^- h*tqh%_̜;'Rq}Sӈ\a؋#6!u* 0RT)'FP;Cԍ Ek ҧeֆa6o_i`3yw9e7Pnd) }VFX:wW>Jㆤ<s;r1bGes.1[WvdDaUjKf4.!9/3^7c!A8vы22@|RݳWGn!D@83z;0 Iwt_> ;A#& 9DBԪNo4Zq;Bgz$YT!(3t6~"24bҵk"{DAUD tLgZ5dXVC#=HuN0Pؠ=7O7զ,xp2U4D b L;fҚ5!v;Faf!*# {f ԊQ~N ^C:/J?n'1ųLΛtt ;75q,('S6̚疿R*cȰĪY;Z4fF[xDeS`/lGq/)O"K/9=b\?ǯ`tTvnMC%ƍ&6D|H1+|Uj4ѿ2u 6 -_S~hchtG>j,X Y,3tjH53qJb9Mu*z҄6/ᩈ4ӧa5FrsF щ= M{܆vQ&<=Jӟpo3z⋤8@FlpO}}G>Հ~\%uBx#C49m7xiQS'9/aE [8Й%4* RU.YsG3aTV!uFFI0%1RTEB54%j@;^ɸMiә߭M~av8"aJ⒰V/x8Piٙ d3M0ߏP(vs?W_"Pyrm١47:t%uE?;W4Q/0K3 +uOt}j"[/,yF=lY%~[ևH#B0)ùdf+D2+}1uXF3%쾗.r1qkfvNuX^jܵIbʒu'~aQEܾX{` OīDM24ڮƒ1# CVք Is6ÆvݎpSx͛Q~"9#o^#:F,y*L*bI,a7Suԉ`&bFAH8rY):GO$y"3΂aFτIK𾯪 5S%c/iM9#0Ŕ_ )1 j2c餚S3, T蘙W{\FvuqRQ),Ed$7A4w'fBɵLaO:&$-_ M~DC$U?΍)4 rF|OLWiv]bXO߿-]I*O;ppLy%83+CWQ p6+ףJ!ã,WT|0L@@ukI|'zi6|>A_M'qWY*u8@O}&2$p(fӷm %VqG/fg#R U(@KviI4w{BFY̒?XAsA Eڧ9,w85T*SɜuؼS>9zDJq8_4 :/n(q85UEn6!v +\q?_Y? k~ngS4y%Pۦ!S.?suhE1ʢвK# ޝ݊Z !jP[z6vl<>%pQ1NM8ˆzDpb~ eaD!.L*jB!󦏆""[HT`:oiZwV껒W7-z fwMn2[p@rsWelqY{%+*vxvZ:@!U5Dp*~yEG9e^u\9@ՙ?~1@كS^?}i%j(~RcomvΎ)E lgxԝ+ hnN%~t5Қ q640583Z0z02C_U}N(齺b`yތ.tMvӊC̨1eR``iua-{xz/mS{4!)/N˚uN{ -KdǦ?hB95uӟfk k eLǾqpb~eJ5+g3jD":SMN\/ٸûvѶ[fn+XI[Z lTEAFL8t6M3i>T7P;T:7jxi>*~)ӽ*؜=Pu⿟@:p>dHG j聵݊; 5fc|gAd޷b#5_ OTF[;؟TY\/#y e4b{2x X _kLqq4*Ѣ}^*<<&oiބQ.rR;ALdYLub`夲y(x_>| qNRzD^0;!o?L_@JlXUnΐPh `Ynw?I n M`(' !d4n1 R, Ԧ$\qۼZ1dŅy.fPJ~$BEƸ!hC+CAzwge 9x9ku)}},n.4JU4*]{=Ӆ9>bvP9U-2kVRa땘Cq>un\XsWOf!J1lU} (C$l&zdIkF ZczIDwm[݇/t؝nLB_VcKd$d=`Jqܧ#=,-8*c{;+c!7Sz9AEK=J(UyW@>>xͺSR{,O+JTpVA9⒟C vSb`[kw)&!dwH0%,6Hoi s@a@T5g;3U+)z-"-N ǹ@iU!ྯDV}HвDkϕf тZmBA+7] Abbujv}.wh}کaMj c[^8Dqя5AvE ~{Ig{n=O+C؈O9^ׇ$L : VxQ3/7~k M(!a؋-8}Bbp,UEKtCtO_u듅!O.@dCj# &92U!tD?>^uZ-)nsUMMBqXCk!t< }t ](q3sqY Q@+Yxü\'xa=iIp=麼8_uWGY puH-G&{a=h@Y? w?D}nrM _}`v’G6/c@ĝ62O+òƈeL4cUhwιU)X5ĵ1i7mysXc_mjYnDk 5.^!7Pc#Rvn)2Vv  @͘fb[R XF{.%cV.:yȠk&@Z4pdŖy$v<#Q氡N$h)37B>fUC:Q[`+D^MeJKV֜bdo_ڎu<SrZQZ$(f`C0\rjALC Uƍ5-jGXxѫq%"wG ̺b8lV=x^͆5u*jXUzgd Opt]i)ۓt[7 U>? -quE_J(`n cAiþq7G-Ye!T C_]m]I쏮ڵM?`वNy ʒ1ҢAkþSR-ZpG4k-0U] \OsJT{!% &'_$;|cf[>'uStdd is".r 3SXEL2oJv؛%C.4 64U;,F 퐭{Bq 9_b_l tR&pYeZzrVzqhn dm]i悚uXQ$(*DLk6D:q^=Bo|xY) z7{?39L2ު25糪CtB~G߮e cGn6udgCU9e$qP"a.\PD#fضtDft<Ѵ:-RKYĹCu] !"! O^E5!{xq6y(kϫS$͌K9'qq<"GJB͚1NHеCD+g`O*.e{c](S-ˆBl@Po4Ba&b>A{}5z -9Qsk12 *jϛAV룄n6a   [JZhv?U#hkｒ5 rb սWgb|"ޖ%'2P7I:cTp8 {Iv3^[Rl)Yg; ig)qi=m'Qhj3tk.Lx7vVv0own>ѝ)mѸVO;(.U3A?TNvT27xZ¬TL*s=k#$wOJIqհJB{s& *a@sd?]7nMDɂcoL @ Y l3> 3K&NaN[u>՟7ӽ[##$kj7suMxSK9. 鳿-`O54Fm4饍-D/e _(j~i& La( 5Er>=glf3] @rF#?y/rwdxouLeaǧ$<|(h'IPY>UHG^MU*at$-Pع&d^iN5 !i-c/;epTᄝ$tcrr\ *aT׼GSgk,jqFEn i.g'C='(dWLOt#5~^:/oʥG52[ѦaNSR&p9a)XN^qWgUh3bѬ+<p(gV .%uIzܳc4g9G , U8%p Ji3/҆2O@ZHM =ƁGdQBzZz` z)J#2P1k\>xE )Tb'^)v An)vPE-cB)BllK6M,:`_J>tOK(I~i7b'iު7E0Vݧ?.I`Oɤ g]u eK!϶p'B?3 ۊ72c!D](-.g+ ᙹQY{gO@ND3!ROFjg8qbvPگr}0dDI/tl}`18Cʯ8*B'5U\"u_. 䦢ݯ: ݿ>Q/q_¬jƉ]KxXCǃP w,X,Ƚ)nd$־EU;nF>JQ(jwW5d@ФHfC-넳Mvq]ok^O7C8T 4P Vg`uCTdžgN z2*=/_+ߋ^i9<}|_$nCx_y턩%QC>fC*=PIe(nUш%4ES@;2C7^#$35oiҰНpb`_맆s؆H9uVOjdڋmx$Bp t,$l@WHsf[Ku%yw{ؒ! aG# "r m˶|owQ; u40e@OR3k;FCOb+IE -ʲ99o;i,L6{$!dw3%IG ۟QIЮ2lGU0Mkr2:hgŧ -yco50A>ӟ1oQk7czlGy\GG9AAJ8OWv\ldQoRwbrŚEeK0܌$RBUeSGnDX?me6AQy'|&#nh~Og؉?&Gy0V"X[U7SʙRa qLb<dL@\!2&ۓՐrvXE饯En=='o]1ɀ f{ .vkNi-=UTxjS:&JPRLXlQU>1)jᛅ 2zX2>?aʹu7lֻ;I>N>ɠl=Sߴe/Ǖ=7|hf *.kqA!3菌q4M!q3 _+$T ~^~³J7JJ#{ [7; ~߭6dکC0K: ql_4s:q(oJL(]ʞMkFtϒ%}Xh<$/c2"s# HFDj_Zd„[s&4Ȝբl߫Ȏ'8GHYf˥}G{\sMg`ū42ZkAIHSF2*Z+X4 ~kPhz'Tez~9htzs L(|*9 YA1rzrbdiŌ0fUI?AnF ł:u"Ŕc D{8 ~k@/=&VX*UɅ4[ :O*$$$J#(r`i@74G.Rztmgʌ0f M浞uIvoZÀý:$Qu40yH˸  1} NsU,SqEC 㗪϶֗M`4\wBTAmm'= 8E]UJi Ϊyry{le1Uݽx 1~l9_]sIu(5)5^;pA]o fhrKS :j˶&Jd)Gi24d-ev\1:qKx^ߎJtXqq547')p'85Q"lO@sڣ|&wp!2)^Q_2HηTl*9 qe Q W7ۛ@ҁDm̾i=,;cu2Aسd[=E-.Q=HOUGvC_tf5.~MWk,W() ͏ǹ4dg[sixj6Red-W{g返NRoxIļ0SyK.ۿ{wO˩|4YS}i^ 4u ͥXV:~k}jŹpwƽn RqAL;CVXO\˨ԙQm}ф])q4C1O`s'{BQkz3͝}qzwTz;3ׂW) ؾ(a2DMqlmHLo&)~\ 8oy2uyXh\|"BpLdeHMy~)iUs. ;yS~y3SKG*wf99Pp(X}s*鵑s ?G'w.8|eOWO&U.4%,d3S=&{CB·|A%V N@ӥיR碦7 &.B,*~!WlUǍs gnE ቘ_z9 ShW3"ZCB4*JH`e=9P {i(SG~rV%k/'G ncσ3 QrTTojv-V%˚6oWU/ANZSw.İq)}-%2h窎IٔyT\Tqru9/jjocE!!=^#5 CYg5i =gj5%z3 U#jYl8D#:A2yfdB6yo[v " sJd9![ 9TPϼJG#fBV!X+GGT8Lׂ$Efa).pǻG`*xchd`q營3a-à_\zniXcyhz?&\t~^07/L{z&>~Q`٣DV-+d%2b1/E~kk2zK#I|*9=}S-i`r@<uZBEroIwCʌ|:}"ҵn92::ovWzI{/zaܨgAt!$z$wa@u_ ܒߴ[Ry<>FjXn]e vqbWFz~>YkCQP'm]Ί+@isD~--ւbaqz;Įq_#V%TԘCҝ#H` d=\?Ku]}llɵRAINNp"\EBfH=ATR p#_L@nwH  G4Wp\Zw.JEi[Vڃmd]k i셀\Ky@5x2D{!ZC"L $ X (c}3]-QdfGq*ovr>s +̔%ʐ pfOgi̋8|P3ryrsq] _ a'L:96E9" "ep4=nuJi jF1>t |;Iu'Vm(*Oш~P0#Y3/I ;BZcaͺ?*E!,WB2 OveP#-_y>޺88zj[4щ…\Y#SHlK*wPPFKg~].UsLF(K2)pD>ks-[O5&Zf d slk W3q;Z")dsD lS9.p/I/~SpcfU\ya_h"[\# J-ȠΚ5<^Ҹ(fʘ˭$pН>agmw_ih&17!s,ο~K9iV(8Vjn:`ALկht} Y1.AyI[hK xCA0},HIיC+]}GIQ"ƲA`-.LdڰT)aj;KT"u\8MwZ0@m&{3v4DRΓqt^OmD xʩ.F8$ GIsmU$vNjn YҼ9IIydOB;Mzd Ks>:HofVIcJ64ļ@ZQhb7%p<\ZZH*eԑ{N!8l?r]ڶ7=[ffȶ>>#RwOµ9Wjqk( #K0I J;FK7gW8ѥ0IU U+ڑDU V4+ :>t\qИ'I23b<"p/H%JTo CbBh7_(\8|Ix"[1}8i)/:{,g2epLP A-E:!X)7t*dE h7zI*ipR$m5,3ck~(An7FOu!D *Rr'oA]XL_^uZ9Gz?I.Zt|P[U!;JBr1},_$aü! r$A% V[?W=)ɎPЀ@[MɥCOr k{V 6Ϥ]tUuaS#OhyvUjb7ZI굸 ǩZ,1i 6v`D_wC+tI5T#",ߥB4t3Ê d38JcX'$v˯4vv ˡEw2R/L0'zRoeI(xhfboNRkuw4ُ/ٗC]cwHϘJN"s%iwQ|Kt_RZ2F'0 1+֠VZp쮩*2rL[}DG=J\Jm({pKۇa %‘,x(o{x8;U< To_oTMQ8׳_whtJ` Bו&{J!|5@|nf)Ye-)y!z5> ö7:)"p$#@|Hq;g'l19NͶm-a)ËW?݈F̂@37R|b9|UatHߠكx=[JHyঈ@L.FrEϐSdtppHx3٢˧oHpXVsq#%=SA,uÖKu<o#w-{8 {[}6\>d[f !3KqgDG0W缹@fsJsF%r/O3}P&gGwKm{:Wai,Xׁ0ώ!u696jsmgXU'SƄa[ *5AB8١,T'b?}!>/{a'ͭD16ʭg t4"2ڙ}(O`QzVFtᯝ(l]|b;} foF5stdJy+ Y9{FJvU Din+9Qecvg4S5o Shpm=ʇprX=`3}YLK]k>cHudLJ>IkK,-r 1Sb=.{v  uZNBwN4qmjT/j݁ieN2D,s)1R%2AVB4XM XB>&m~> o?Y2߱l*ȝ)'B9-VT7d x5G67Ş^u"Ӎqqm W^Rٲ*q &9bɻG;x)R<" Ef_ۀ荮ԧA?ŗչ]ڌL"C:[.cmUIPܑa,FF(c-5c:zū 6[0, zf&qp.E{c!h=,$eu{ӌ Ÿ ȚlnN$!`͎&ڬ={~  *>b xfb3er ܗ&YMajM0=P!Cyޮ+6Ɛ-9gvt0y4Sz?<̛Kdy/ifԗQj#0&W9Al]Ww:GT`w$ll)NVHhzaF߁Qx -9їwxbx \wS+!9 v{ܶ?!(9&T|0|N[*ݿw<#!B_g%G'L&4Gl$CHyX浈 S5F&|5arfw(KY^=rGG#}vjB%p? sdG킒W[]8h -bV3oNL2c^]73!{D *[$|Pj~<ƀyl.o\Mc%nbMZ8"69@3;P4mg]f*n))3s\_ƒOf8&mgV5b9-*܃6 _ z;F я@ $aF0YOO!_qլV ގ%B?JQ,BsY!R%s7f!ߐ5) owMd8ZbpI}P&[͊8_k sG$S6v=)4 NOB+h8H0x+&( u2IBnG}0Ď3RwK"zZRrk0r<:x!y]\ 5g;o<y!|IY@Ax(F1GgIQTg/WMIN.Fq*EQ_0 pYE)iMs^qɀ7L7)rwjR?/[:ޝ$NY " P6~K`@ TtVl˔ĸTV;JO;1g75҂-E3{W@X ǿ$ԝs}oY WV0I`1E?q$\5eT tT V.{ %K ūu=䀮*v2U aisrΦo abۄ+abt $Ǭ@Kj˒ yg_NCamhYJ+e)<-Sj"l4[4!f&<'0pLm[4'6&!6č+̤ctjX;R;aE&Ev~yLDԆ NR./)VsH)]e cĢ O3^%ZMC09i&Tem?nvq¦]2bp.d9Ԁum<- ʳ:%  !];_g>]Q>]+qT|VI-ZAM>`t\q&3^+۴}5e/~I(RI7gC3ϓx`c$BH#^bhm[Oϋg.WzcxEWɡaM=.5x//BqCzӂ9q'&K5H^ ,!yp%kv =: $4> /˪mH.PKaK$V8zN|эn-Aqo+.JJP7T;Bhaˉ?7T鶄{Jpa0H/ sҼ={1jۓz$0d@6x/? w/+I ^cIRUga-'#@NqB7`9pNt ö^v\fb*_dk&ds}?IX?$QyX ""#'Ró*p^ؿ#V(sZGm6{)ݴJuPK]з[A/)-B:1w)53# Z?1Up|C!2r:R~[qu]gf) dQc;9=,j2H,tBMP/ki}6(1b^/%iTTܸvҠ4`~at* /JuxU9+O^X{ 3ni4Zu]n>CCN3RgJ_k5*[ L6=0, U8?釥tcv2#ؐ qm.g1x0uwH# 'S(t,"S)ȷƀ:diaXf6|:!P}j#ߤ{q|_J8aO/0!_9&dpC?B. " QkaĒ.'v{p"=k鑴-tzZ>=Ɯ>`% pJ kK=@tHn% _)*:[!K_KFCDF܌-ry׷9tsO a8V-$F/eI2e.>I͡(S:eSnsʪ@vS;Px11>})1!A[{'57B! )d)N"eG5qɷX4Ocxb|G]:o't2_h_H¬sDrX_=ðzb+>34-:1i^횼8f#9sǤEus"v#9_>1(9yɁ5]sW"Z8>'1r!r.gXNo;Zux'{ Z'&TrL:̄d`4ZS1G…(BH]4UnԸCm>K`QFw㢿ơ,#b4ŚP&؎q M<w[r"y"w _c-.Z2xC ]Og q 0v)' 5CZ?_c\ N)hSEA9EE 8eI]y 4&O2[tf DK /Ƶ. $ ,fG|CWٻy8!r`]:&MCx~z^4|fV*xwAG̀/.LŐPHg(K߫!KϖV-Gej'ʐqrxmxѝݲa Cy 4jBHhk$GSы3hZj̒ aQrW;x U=,MۼN$Fޔ=6gl48{*4aTd3&9Yf%ci Ж#_Q5vt֠3fiu M #S|]4*uܴZ?K;P+*uz*F&1U]af^Jۻxr'&ljG O ?"ƲP$ry,Yޑp31 hzG~/1Oz/V\MpJw(k/CGt&ά2.~mبCIā<:%= s<toŧY=!q8B,r^8>Ȏ@kQ:"쇲k:6톮M~|)Eo}T]>*%F?zH 9 &p;]Cac+N]i:0('viHmL]}?m I$vO7<. 5ƳQ%~ bNXZGeV=ZBQ*`Gu?^^&Rq\d^{9 C ^Fb-]M6gvi0A`p"FzW2òxj ->_gBn:E2q1O#z))Ũ}?bD5 'R궗o_ĥ8:Ut!hGt`g%ajJi)A9Nj2'/3[҆җz-v*)qO%$^*Vlه;p:gdtrF`~Bpk :jvesm3ዶjR)1p]r|+ݱkv8M3r'5i1O2ÑP]nߺE3 a&}>߿!(46 Œ# C?_OX*nmRz 1 xM3*qY@/sWđo8}V F|QV1 > ߅R9/T.CʗNd%_dCڄdtQ?[ceNX"VHHSM"=q]эܭ=Eؕ$qzЇ -^[[x֤/9i dZVJ}@zw}e}|ʾ}XLl~|L SFyь*ւ9I 6 OFHRޖ;~e)mvhzrjtdžwfRݩRI..OmFX~qMW)Rc[ 򷆲rm&OcFĦ/! lOT[cc?95`{yBd+L7N4yb2`~0\Öh xZʓ㦷~N39G8))gx_|\d)K)GMTğBx5xL Ջhr҄]H2=#s~F/#ёYg=sԴ^x@0 Kv !u fhu>4c0|?I>J(6MJ(OeSSZ>:?f`#}Wb%A>vZ) +8NaDvhE{]܄g::WLTKU+AUd2dcu1:wd2p0Ry XEYmlL#YsRb+z2' ,v0R *MiKCie*~ ܕNf'Yp837I ~.,k1!D\nK*E dɉӖPA\PXHjS|CF^@HT~rQy <VE=rm4fabk_Il۪znvWpCc[:h;GTڞT~a,e:@FJW#kxk,{T"z$ I+85W21FTL(wwV^ e9h͉}Ѝ/Vrөi)}XF}QԊp3]ĔXW;Q 8M^l<]@Z=}Ez3| pf< 2E%G@gy|Echx#v\v)$Yf&; X(13B?{D1/,F tGOmye g :$28Uwt?6Mp X|WU1 8l馥Ee_Bx7"C¤LPAEAys+O4M)ś9`9g‰ʹ읏qoB !jyRZn3|=⾯d8۶}|Ad9vfDUCdtF>7#ktY7 ɉT{̣Tv~l+*{K[}_Ys),H&P'T&4$/!L(H]B}.+M6eN*]=Xc̤QD_B631dIJMk y{\%P ~N]ՌRd!@Y) ;\|+7 lS x6W(~3q3Q}h[>yq9L A)\3Z8v/`U:b vta9`HZڵNj,P[18WOl=est"* $؁'i{ ; Q[SG2s+L9?*pș FUzZtrS/GGV#H8Pvp}z޻B`&Ro7b!¹d0)uhVXl21k~vqjѩn DĆNp\Қ\Kх@}FM0,7y7r8jfG^ BzDEP=0k٠>'_wB cP+ ŅX#Dy^kXWa2.5a: L0drjotSPFLmuq.#m@<U6"rY0r]~'pVvҩsp nxÍS(gY]hhtĀPy!,p\ GG'ˈf{eF4vo0LFP$!X )"96[&ro#C q\FY]bزڧʻ'd˹O:|e<1`6*Wl5 ]sLpHÈib&cDI_,?C.Xؽ;6QRsZGս~2*nqzcEJ,P'@/WuI<#Lo_q7G^.~.wp[Q7&/ByLB;:;&BޓoԸ5* j&?x .(fTÈ5N>`U >Ss|Mo𭲍nqFQL^<))de{H\WqzѳSF/PYLݞ12^:MoN0HkOX'Yf6!Y& `dvR:fxyywxY:x,Hj T*(ɇYsg 簣#=ۚa(0]ןlT)vbwQ9] bl!*9MFy5뫒0IcLq 1Yyl-Q u]A er7s|/Smw&b3z [չ/aS*I>^NJCx?G+Cu LB4umrPx.umy֖xPRb5U,ͨHwM0[ \zS }BG6;;K!+AP9nT~ӾBMU*s>AD2n:| BPjBm8oH+LĪ_yN631k !)撑a}4͇>mmO~Nq.>LCDi&Pi߶39 A!q#a\1~jisc7oYab}ȵ"lxUV0r&9aN"*BVYV"d\hnFVJIcm*>%X9t4~JB2>  "*fBC$i+%1x9Z3"L TB3[偹뢡 @Riz}0-y$ch h[B\ 2F࿏/CY@rbr&&Gt`(X}R Jh)'ss _Uq䍵e⫀!241 lFR]l7ܽ˷LscSYn;Ιpՠ9S25U8sk7, ˌZV-]ꅂ=A  &T'ی+I jr=C+%3Tb".E>AbvbN%֑(,_HTB! ' 4=l{al`:z}\Ha"n!ʏ(( ALo\.P SEzE?u;f VEzr8JG64F?eEe4t`$EGSc|uC@{Gn .J| сOGYO!Ƚ:(2Gձ!O@Ąc:BDHB=#3(ͳG@:8|~[O6>ș>:W/XQDn(R+|U:kCBm\]{eH%7Is=m2c\wوPqA{[ F*$3{91ylE^H.=޺ُ?6K`vk|j@сz-[n8S`>\̨ x⧉Dww5|i93}5R FV)7շ7Q̏qUkt2Y;A6 O!/yOypVḀ.Ց:OC-w#k7Ο ۵~)eXG4XrGֳ.A1_7Lb@ٱ6L#Qŋ69w6 #alEݞYYyrٯγMyTsdR z}֝c;))GKfk.I F)t1vM$Ӄ<|-.El61RP!JԒN- PqB}^KoL3B+n}!uYm$knϚ=@V'W4 X=}svP}TSdH/VKAzׯMȃ ]ԆߡPz P5a|$j͓иfcfY(:Ad֝le]+˜@N:#& x@urȾ"Vrϡ癛J"?ṄoFG>}Ap1_|5SoEjj-ih7ԫy?5xO2ueo+z#S4~{?K7;x=f(y+x8;kY&փ!!IÍ {Y b/C5٦'j WǩsF-|cV[-)[t\M?9|li/'zSl ax,cKD3$Ԫa~]g{.c׽1dwD71dX4 6PM=UTi.؎sYX3r+&IDlPT'ilK!;wLVF@Yxy%>BS(AΈˈose3QLꄡdmhJUh״|&KV|sFMMơQse1pg$U8ڿ6Wo6E9! %3Ԉo1fA`怩7d^aY}q`g͠7^WI / ܋0,a3id6"kt8!]X_7 x6/jo*YP[$hCa&~ϯ[ GS~:9+dVl5ڍdȑFO yV9kpz`aSL74ܠBzЄr.GzsJi#;О/^2sIGP6Z0/ymVvK8ɉSF zrĜl7ϯk u#cAP[tF nhƂ܈I ˛0oj< &p3c_PHyS(?5AD,TiWζHRmУkNE\' .{F cMd\YתXIvRi&5Au<W Y*Ak=4E.z\uk1nʄG܋q7p9gԄ&b"r] \K˞d3f(bBNb]'g@pF _;t‘ 8soΠF膈w.ml n":7,)*k1hNWLZ T7~>)(u?-+BnKR=b[E F u *N-;wưcr9J4۝9B3#;dgB!7Bdgl|gptPA-QUmdOAdm2cSޑ(wRAӨwXk +X[&;'3ẖǭTO9;1e$Vym>ou0\{e|!55 oUici L|3tJFF^zU`:̋ NQvA]Y/5Q +du0w]]ɹ \$Qn~29ƧHk G=@lO &혃ڟ&$]8`wG%4 n=.cq9z[1cEDUÎEAv |eC}2%UFϔ `:8qvT%b~AP׹$eQ="^k@عq:lIzOVg6CIGe-H=\}@m@u+. ?).V0m~vP@f`DZAjY Sme%Kʸ{h%7\! W2#BIVro5Z5M!YV&t5hKf)f` /\Ⰷ#W3\}tE›"GarBDwME{ Urt D `W{]Ҙ+Dj{,# @,bI9f1Trf(FZQ%~&oh/y.G$QX7E#ͽkvYZPAD7Muf0PaSp}aBR?JLmda) 2<q> a81J^{ޝ\(x@S8yB\cO/hZ9C.S!eupASbDf)&K}{zaBf-O&OK3pH1HG]=iO:M0c.Okĺ:f/0KWԦZ,إ#P$n68:B$"v#~)s4q[a ?բkiieE%uIOW~q(e g}YqIAL 7 =7!U!1'h#D!~Ry,a Pj!"O{QI)VR)q LrZJJN6i;<:LVuB#9~fޥE?ϫBrPF*}p1D!^4r1G rZJ!=k̄,,ʻܪoPS+N8Iz<ב}=w؞ŸWf3!%\efomx_M$fisTY`b}Vcݠ@$FiXuF] t5@d!X"TvwsXѕ՗2ªlU1F<# Iw&]Oq>~ib.d5:]@souJ[71ZFVOpb*ZK*|<Bȫsܒz0qǵ$NeH\53st뮶Vc9ܚ3w*9^v;/) K/O%ݱVm%ojntbrV=HR1DAst`^ʸb$Q@c`9atކMs<'"^7)xk<~W{d(|.PX6Ko:|3]4 UY"*g*J~E:F %ۻXo$c/306HٛTwy&jYo/BJgd1AH!"xw*U6y殂Y+oN38v eJ{=D^tMcCL$e 7g a5F[s[-S @n91:!*iA2K[enjKiu0 (ɤk\9`{?K/Wc~S! pξ-?v_].}MrZveeN ('d{/OƯl7 meۖZ$}%9$hWZ57U^0ZU7('f1-q:z<ɒ`%q3)Ky-V MAʑܭ Dabn|G䟳g~ϽA_! ePzl^lvl"^14#&Wŀgl+g(#YobkձJ^IhWNt-8`o{O~pߵy1E`.5c6AM!L5b;t!q&Z94ir;"AD>Wz 4PQYkX_IS%3n.;y<枦4󉨄`0sזY%ڦpa("y #تUC1!3MЂ*Bhu c8,1jT}D[ɨE~ [ p |)}G2uVMb 3 : c, lS9;ELSd1sk1_?44_Ma7=Rt<;sU)yTO0yN߶!7-Q*zd2,:):*NZ ]%L|; cPՒX|n^xc< %?*K#K 4㯐WC$=x?{-H_<&IZO)e8Ө>2K< XJ\Fze&p͠1c)Ε=F jlH;=,3_1J\S5?q$SqX[5 $4Q2_m<&腭$q`{|FM<L7+[K.^.jVE,ag`lT%nſp%iʹI]Ko_AyUYs>' vȊ!?*c]V}jp,fi1"N ne/ڻOu5\Hnp rV TLp;d>$,'1k⛰_ уU}l];ڐ]heƸIs* *xAzw1^{ N!R=$-Ct +CuJ{!1P"a⢄V H&FjW$1"`"c{/|O SST5 =Hxl,Iͷ9,K;B^?*ngfRv/ߝW~0'?Sk.&heA3bX(6m_{o# 3=i3 QD/Jb{**h,xħgH YNFjoi1PGm1글o?s2JT2nk:Q7NsMslKxtϪ;0fSqxNrC}zp;AӾl?)$ہ Klme}z*$65tJZHtx5ѿ76Ͳ"^ P#q`|)pZ5 BwMR-Hb7d48ǃH$LFbc!유HͶܘ{&lY9zJ͙6f2{W 1dZ'4 ?=U+5^z9eCTgjzwd,UVp-ZǀEs)]Zނ C;]}҃~tuġIeֈ*–wË=O454LK[u74_DmGXpM`͌m'};seRz/J +'#y.݂Of)㌘D7ÆXXPvlAVD]eQ@,1|_`{ϸh5qTOB} \`=!LȎY+H",!b^\ <F]b m 1͖}V?Pf_*^iH/,[=j8 `qC0їuNrx~0m*nrݾ %=쐛rT;os@jjFҖi~oMr n?_Ls8" ҇r+|Ec2Ө͓%6e F;z;/F]Aݖ1qc|]LOA}9e4QlyI.%3NoݎFkZ/L-h^iG̶QUuiNB?0֐;q d|lEٖ՘Ü 3Kj\ ^ XĘ+>C\)W5t䠘:әZ ĖbY^˨gI F;C H0/yϨzF˭u@$ w>ИCײKO PLap:,$SQ$C"o??vKV bŰ=8~fo$Sn7uBD륉oi|fycg `UR cVf Y}hsBfpВpHEb«x0i<%0hF<$' ˍ5BP8]|yp ( ?)-5 H|؉XSؾZeދATV3ғJޑ^e1#k bߊV ZeIT$dKNw}ӆBb~Z= UvD2UE`yM:u!A2BGQ' dctؼGtSz9;V׶Ru#߀Wm?n2}q=SZVkCirޅEhZu:l|Gc Gmwe #=>`\rGj y{K0'_ʞx.`-,]{$5ާ*mCц0di'9&Y G[gTG^<!~uA B֊(pFCUmy*gQ16cU, D2@TSB"k0jX5fœ+Lڵ6-]͘GXlvi]ǩ*&%nWE :R*n0&m{ jٓuoeCy|^ʐW~a"ka׌4 b1)OsjLC d5[SgadpqGMdo]P&VjTdAV]I1 YwG0pl(4͠o B|{= $ {A&P0W2A^& )^ά`H Iqԡda=[-w(؀NꂻTVO˨8l9QtTgEKPkrf֪p:CJi\S'_ =w7Ң=}ve X@Y>~grH>1]E[(G.kyx3xĮD6-c߸*e?"&Ar`{t+Rb;T!u-*0K6CeȀ'rEZBZK|ĞFQiP=U,?2xgxnkRS)M88 zm\)=$Wm- EUPݿε(NUe0Ilz;ף 4A/%7YaALyX0MZ+u?DVM)VWP,ߑGZԺ0ry?j+T]P;拜@H·sd=`H$"⡙k{f_} Z*J0XЄw@;̐' :'.ՃIgsgmƲkًn*j^Dܻʰ`V2`܃F]-Y9Jfc; t EoЈmT'\26MK Llf\;4ךykS֩[wa-=θv㉬Qm_&d}eGm# vFsG>raP[8}>\cE@0 }D s.髴HF";;>Wuهa@2Zeut %r.¬Չy( dٵUW%xEoQC2x\WjfL^hABOO6g@QyO?݊ux5i>eR $B '.P$KP(;eYBY}‘DDJqWj$Owߧy ݃h.` J‰ ):rXˡtoҙ ǵCRDwV%LKprRk 3ZZ̏'n`5vAݗZK :[gGgԤy .\Hi?GNuNqMO10s@z ϜPV_x/k9X& ݁'E:s}ۣϵrJ1?r^LOKGIkUI]c_YpO^)b0񢌱g`4RR5}S*KNĜr~v = gj]2q]ܜEeg2nE xО32mE_IJqR4j 71b_.b>;nhu,c "sN;)je A)0d6D<ݽ|YK랍sMj7oHI!WQE2mN׬h޻€LW]$O!qb]4*oh0`L%њaWUBÿpx(%-\#,t>;**|\ \DXbi| w1eZd]לy1!oZ9AJLxir *Z_gcdԋvWa" 2gDc|y%n ZӧZq`mȋN'Ԙ? #7UQ=捪DPn:sd};` Җ1_I6J#DI63ʯt1q:?g]%ΔH1wcom[jVןr(j6e6r EDoEѦ~?󻶛"FBkL7K9\ ˼Vkq/ihbCw ) }a"Ɛ1dm; ֡qzq=]ꮭmqbۓA2u\!kKZhn^8wfO䈅;ZVRSf/eMtO v `vE9(l5;/͇StmL1?6N;bM|XXi9M9.$*O3u>$(MO Ѯ+c !Qe+= ˗SO' C3I';asR|ࡈƉ `MG}礯#,Z 2' /dgMQ䨟y9vG ]OdVڄx!S: itr3K0*zC68@%UĦ;jv}]3Z-~_G _%JgK9y-c{%ߚ(6q`VKU9P\֤n]?5DȐ4SQ澴OYYRt4x.Do7qL42ZIKp xԅJƯ(~ReT;}ГHǁd.xêVDYP/yp/;ȧR+"M!x_ ]^RɅ$^/bVL@[uڢempNR>^CQ fkXؒP<ԐRjL~i ~@҄ya(ojڨ.61SizI5.G*Y_^> MqO_5Hf:ˊdʉ+"C(&SojD鈙C(K]a"&x\Jn+o_ɊKh pKl w(0Nm{ ~ٷ`_{z .5 A%1Ӝ$}5ect= Ԑ:h#ˢ@Ǥeי2OeIIGBo>J<%7#ٲ'@N1I؏y<Džlj8e.Cz[-?8wG_ch„4W.X{p6oSi'z(a;A &䂃SRoC m$/,n w i%E%r8r5}1B<׫> Û$rF: VX5<~FG\M|ފ!, I}@FvHkkq6󇇾BfG!Wod9'4AT˹2+YnZ#|HWU5T]J2I|-jųVNѥatti-R_Q!#޼u9.NDq0 Ӯ)p<#=Gd`=mG]IdRG ,A簫0{ӖqDm=#z|`bI~AuAKږO*+p> WYH!et' `If AN Ki=KػO-0iJZTO淈-? %YꢚmE38ψfx"]dMÀD 1B-'#0iHDXL 0|E{MtΧtK^ ~%r6טoyA$H $tV߄XwkgkP+nCS 0к.2s/_ Q6~ay;[Ը"x=>7'Wk#0Rߔ`CMyH>V0@l'.co >vID^N0vgY5 g|-QPGIZOgV|.4:]Oҧߝgm5E 09rKQ9fPY m1)\jz)_PHYg3K,x*=3>0];)hM#Din9hX$1zn '+t;~0{8TpIa>(!P ZɩwX%KqS7mekؑ.Y}{ !kaj? nP.Dڇ]Wu6}`r8Ѿݨ!_vi14uz|LjͶ^U׹fpfzc! ⵂ#Sw zH"9]fuy`P4 - k聜GFLkKFsB/ ?2RT<1ݟa k7WB>y-͘3iD_h2Їмo<0KX9SŤ/uI w#GDP3?酘:_s*1L9Ԭ4M Yڮ(6ؾ5ѩtڣ vQCrwgIXz9Lj'8r6>N |eD,ɚ{E+36@~ MHIK%q&WZ0ϼ?l1oB2r2Lo#tc ?6) xl>g^LkA$@0?d>]DOQhw±xI"' Vbs;1<\8TT"TPQp8{.Ͷ8#bʼ,5]z4:0d| )U"u7Ƅϊ|V}wR$X@\7NۇbݼԎ&D˱uOU\u}Crfۀ?P=.h;5IӓFkeGdHDqIm0 <\pogr>u`RRTUnK2 .2Et٦BuGX;ʰ:Y"A@w2 ɎoP hQ1Ѽ{ n+Hz?Qc9&>cITB`?#edJˇ y44MNCN?E~d"|Uki{E81Ig "Cd^4-j`KbAakC{488~ޭ:MQ57FGȱH3ܴ)E۪DS) a//(v`Mܢ(R`dfA`ݑx*b DYvΧ+2|z75!ln74u0f|bg 30g_b x*q%,N,iQlC{9A۰6lt{кwxffZ4L+<>i+PY3z`S"opHhsiO 5>ΟX^{O)ãn3U]c哖%+f\|^ؽ(NKD#|,Ӕo]clČ ѵci.&?ݽel]Kf;Zk1Ei컊8oRkr6\XKRR;[D3д9ȷN,\׼|HT}ІHڍfzIq HVnL1R4K ÷-[0Gؓ\5K&]I7y[ch&1bzaEbYK"!W%8}=BkQ.AN'l ʢwARDSX]3^pr77cKX윪j?)rt]"N<~)C3:=_gK.[6Jr"u>_+#']8Wհ-Z^JԥG đ%/F} #"[??CndT n\(*bcz/Pd4rw\ܡGl+,5d7v?QE=/Kq?<0)pdbM_4}P|tܱ/?y0Q8:PZ%m\t wJυ{4;&\[`(:2SD.|: TZ5\| Sr Fd%XO\rR`Ic MH@WǼ맼O-4cW0eIe#"n0:sqEe9:Ѷeb`6 z I8-l(Y{eO'BKЧXeEjI#|E4"߻[Ju%g]w5[ \݆rw"(Rn?YBeW esn3'alZ5@7ic=UP?c&+9>Ml}{IWQ\"aaˣ }!>g]h=ѼSQN竜XݣuSfڧ[3w#KJqE`lr K;Dcz蜝7mN ӆ !V*F8Otd41[B8W S[K1y1^՛+|I0@.:yϣb:}S٣/z&@FE6ru7~רېaԙ> jwL9_G vpS6'EKnL璖cm:$yz70cDލEvuD^IC˚ˢG_U…74T!e|aТk/V9y*-mkK[Y]axآ/ʠM?Ԟ Gu .wNRS۝37-6vpfѺXl~c`@N1F13V2yA‹>8Ȏͬ.qeajDH|̖Yh/xQ2; l`rB5tb2(xhw"sv@^Dɏ-.')::"6JC Yp ZL(L>yڡxwQ6 䬪ZY nhZxW'qЏ!nI=M  s0WMh+![Κ쐄J:qI +9sN!ِ4+Г;_-Z|ΡQYKls8p E~X$&UYGӘc!hsn^:mt$2劣D?S_Dx"SSAvQ I4~S5=>1:lBgf rv;WkEs'>CQ©Mҳ'&Ow% $Ŝbi,Fe *rtl3ڀ5mLl$_It=N5K[*%F,YmxQ3ت2]ķʲ82,D/gL!L >nT7Dmif_{'l[fI#m_ mIx+x öMb%f0kdB`e#U'[>mQݻ}^ n&#$7LqhT“+*[2. _|YqpB3 !Rm'D}LuGt[; G M洘:2SS`ɱE}:E*1"KLf+Sg!7NQl͍sMJ*}s,95T}.g띭bgKO7b`P*Jv{JZ(}- j@ N}h5o1kazܜsY>k4@{S/Nw u^W{lHCOlAaDG YiepEy|6F_ml/sT3 68W%3jSiT/d޸V;Yz!/Ab't>\Ϣ^3WFJfK.݅C7ҙmQO BwAtD[!SR,&#\J#n@`ZUSgusWx^'Dt/t朣$z|_{ c*dxXZ3P.Ϗ sDg%1:W[FALnj φ+` qoN~UxGv@@ ӷf.Z<:݂o,jc4^u['AujƐL JUÄI <*򤣃갠afx6V=4U fWpB!*Ek, R!nA.AGʈBV,(  kxO#_L Iҗ 8=T ۘsL23&N=[迸CD2uxhmQ+_YIl֧0?XR;t[`0*\veR=/` o;Ī~mcn t&˕o}YTkUZ5-Z(^­sػ)  ЦXz\FP` :> fAOoed![B%#:+UejH;`x!E^ĻlR2sp[uf]M a#&wt$wQjԆ?κz =/B\]h(4cZB7g`> $4Ss= }TM^k]%BD?Dz}p"\騃VB6i"ޣk˄x~| >re>>d@~mDq;CÚD^k'-&"10Ka$C GAy; نBaZ>CRHǷbgGIY?N= Ex`PP")Krl;.wjh;\{U鱅AmK8n,xZ+{'Zmmw0wwwQ5a Dγ?*?+= ڈvk,IyEJM^LIzws vC;/ndhBL[JCNzhU|fN̩9R^?Ok׽E2" um*@'Z9t|hFUBБfbRyj!/AqT=EL *`Tb/#10XqJԪmA.L"pUҝG/P'k58n"38a|Ή_Lr\u$2 IB(b/ToDj.^T[dg>29=[*?+‡gcC_$;wcH,3\h9q2+h6X}8TCScVSb̞MxXa(/'rj;g3mtn>4wqf$efxQT׌`@9" zEѧCFQ<{QytL}( KhyB0`&2⾀|,U/HpJGs+>PӅs?&Ygˢ0qG[:t{ҖH1Wr%i짩zd)CzyM^ͳvO1lqO 0 MQ9exr&wHxͦL#  Ct~iiy?hATuRjl߶<S8Z/a,/C.VNӯ?.leN["89 2v?FKඹD̋vc=$6tXR D~{]<mco3Sb-srd}2"j2;%] 2W4zsYD1b?&@n9}bB&jr" `y3f$]VB+{BE#ꐔVPgKER5U* ).Cevů]iydd4peXUٟy+̂CI zd-"hAo=a/NߗWrl sGx'lGoEv*vԦ&܊j64@;m"믗WҀGl4)j&ݺOLc8ʣⴗ$iH T)J2of3xU F;JJH+hfܙcWxIwV,{1+o F@QK ;˜,|.kT[L.Cҕ ^8OP_lcF/ʈ>TbNe6:s&~rsAv]T.Smqwc|BkfܲrwU8̈0oIf{X]rx `X-mb 9,^(&fz` Z`8bSNxkZw6 Ι푉DZM1KsȮSA-%Ѡ P Op܅<|5{'5)#d*&*ьȪS9=k -ij@s@L8z}㣜|J(9a,fuD~ e$#mXOי9鎍dwU8T8 >ퟜ}}d%k*N;Y8_G?INr$ lE'Cy^ 1RFYKɆ}(Oܒ`WU 43 9/ƽ닁)%H-r[EDNmqb8QūX>;*&yXL5Dl@"~HUWFM/i7Det nל۰|O'Y]1yވ7"_:"&~ME `rG ~11mk"uRwtTn&%pgVlQ!3#R@X$H%`|WF7e͒菏|ocE7?: *Y78@]y]{ءe\ ji i4! Ě FqQ_s94.Փ۹VcWkl#Ԕ#3h`bA? sڲA9嶯\Džl-k=y3.ZJ:H#à {:v8ҫPh?s99ٵ6ՅsO{*_3: *qA[:e73&Kv/Lm9ߑ,"=w +EB‚0IV"kxԛ<7@scXz$ iN;-qYɵfP?SԕgשZDr,!Gha.xCUIQ8)}DRiYj̱RMXVsXA9ؙ95lƬý4"˼=h*t}sebÛ8B1T.Pt'qΪxN ? Oȱ) Zn;laBKK&5mt7Xȵ)If|XɿOop|x|}-b u~)]v`~>xr`$/Ï$ԊBstU⮚Fj4,̔7}Üág!^:ZlXf}A/T&8];lmѰ߈hb;Rl<{nKw{V#{zlP 2>K'W0 :]av2\e!Ii)Qn2Ani!%5/<8y%B lT&1z2-l:ǐqǁ\g[fG d$1>0P_jR}aGГm /S6I|(S } )a_});B43]>M[=Gs`;NvaleR]w'a6'1Dv4|$1\&Pkq om Cņ2gؙ[cq-c{bxHb^*)XC} vkI7eBpc<B@$;nXkrg+BFU#:%+$՚?6TSDzGtieS"Q$ ޒ=\k (f$7Fj2NlsOfEf _5n^߽c6'x-R:1SRGhĆ=1h9raCDi13MT-$!܎U]˼,q@[^7UJ-'hI欩2ܝܭ`, ^>;o >$=@0dîeH:efAI h3Li9ZUИ\:4/Lӆ05"vvөszDk /t YJP4H(QR՞7t!`d!XfޗCK&~;uʃNxA"!5(ƳqQ |JM)AQۮ3+BpGȔ;e-P(stvn7ϭ4/eHart j[wݤiio`PGyq|?ZJ]Bxw fycX.^F5HWIV_.CUگ?y"Ż! 4lz+!gQk@qcE֘XĬ/mAW.Ds/Otʹ)h4#)T rkɛCӜJ*~387֦n$p.'ƖqSdNjW}pW"]djd(~]Ӿ"vVL&ffh &d#Wr7>*xے:v+ZF:|YԐdu~s}ʯQW}*ƒ5cd߆{5q{9uO2<(ݖAL2lodJ;TP"9*م̝ hظq7$P.^D{(kOWh_E7VK#aXʞ -Rh 9.(S0\6gՐlfH4'_DVVd!gu}|3~)< :mcBRrDǶ@E\5O0)kӃfZ='h&o _!Ӹd+^xDGxl!+HDx D0*RS-Nsg[vn϶Ugt; j7תz;SV1F.)3M!y03wݢtZf$p{o?9g #lɹ—cԯ˪ *WÐ-huRw + |xx4^Ѿ~g=BgG߈7C+_ ( U5M#JXb P(sΎD tQjOՁBa#hP·TPxΌ:tM<:E; E[^.חD._&3ocOqåj8O@!9pK3g?+N̯~!ׁ?>=A~K<{3K!|aʴHW{3? ~k)|"aKW`>4}Gh_Gm_|F--G0hRb%m@JةCch)q% Ȋp"*0'݈\KvoAŃ!!F@ǩ%8nHy 9ֿ; rSRܻDfFk}L\C 4F9EP9] 2ïPiq4J!:/}6Li@_SJ^`O܇ޏYO|'mËklЎfJp[pF+jrhmC)&Pt~g k^@`q8S6d;m?d 1ZR&:)vmM3ۛ9Ҭ\z)Nhng="%da P\Üd9caǹ&4N)篋[V3fnS8g W\|bm+q5f!d(*GoR4dk8>rO,Ctd=?^SڤmT Z"A5_Sz0ǾBn濼 @uh "Jj`!Q 'I%6\ Zb;پ^|ʎφ:JʏT|Dݔ67lRL!? !^<{猯a;67NUx˯k*TDN~vGVOX5Eꦃ1P{ )JԪ >00"5w7iJͨ{[}FEw<N'r-D *-NDV(]K4@2=HlK-T qXxK\ip&!L6=z)r\ J9oK롬{ ɏgOE0'$O4 @µRHת;.LѽmXiOx 7tӘ wIeyHk@yo4\ K ࿲igjnB*Dz#y9,\1}#jS@AF8fR{(ykg4/,ŽEW!Ye?ϼxݟG2}^$h|݇JvBa&%( % ?Q^I+Ԙ^* 8|XXE1hz|Q(wɣxMoԛrk;5K,k2vGj`6C5 aAOOD ݎN KXomyٱtsdJhlW|d2 cqWHJzPp cu_(x}Q 8)vPdNȇdOhkGfYxh.זE)U fi &>޳}ȓ~ WsdW ll!-OƄsǧ)CKK1ʱ(,~߭";QT=+4guYȀ7 t(Krjńol{еFf4 4P€']jB2`,j"`ٟh[t A=ع>%5])ڢgݩ5!D;vAK Q?5`M+O`qT9(fG`̥_M1p8*=f;G٦؃l|)Iɻ&%HK5\l~=UqΗ߳ʷ9(J"h)=&mLo?Ht̘o'{ƅ~<ӊ}ͻQ\h9G5 syr c PT>aṼj?f!tp~52@++Kz`_?3,ᚄ3Γvvv}!|t+/uqm&Nz3`PBQ7AFۜ<ba̲kEe܌*Oz2OȺrSABܓWZ ܕ 2Z[Հ>cpD+f%ʉงzo CLN u)9> a+,ȆDf36$VN~mo,Qg(*^~ՌwW>wPdLy^΋alLe'_#v6_fNApȓI6/J +nE MڐHY.eo.y_۔eK4!8~'pѠm79Fh-6XbIGo1MoTHdaFh_bdIiMMa6tbňSHgtpw%n_#2ºΨY)8-A,6mI2tkGU\_9jg$`Kħ,<0*F@>*ٚ61<+Hy]jfd6UF$sD.LX af W$rlO4FƈK\, bp6FHoSؐ6E@櫸,\H8toVAhC)=EEbd嶐l"$گ#hGnqWZrTxFFCj㏟WN {`ʓByQxY?jܸ{R@wJ]w 5JԚg7Rdiz>1S .mZ*tr$,^yj (f|&sկ?Lwf C[̯o!%VLkGĭзl9BtZ!Ǒ HbPM䂉l "uhP|<8{Tu`jM4'`,a-+Y_b7ڟ"&Wj9[=5]ȓUJ{3Vy*l2|75<5r$L C&vb LYuMsHkKi3v}y 6;L%{?)(F{OB|ʑD`&\]oIؾb!ׯ4K$>i7;THdԤޚ?xe X_A `_YvN~R0mMXdW.fVk7}vC#-nW hJ%*aX i+H,hX= …XbfF,/hp[ͣm9 lOwPdX'XMlOA˵n۩!,]5OȢzcKpsk[>DUGʵ?Ol5|> ErI# SXH@0j+M@~w]KhwAXH#]zOk_\'6iW3jgu q Q='ȕ{XNXlEv;6'Bxt i-vqCE>tvHdYk٩^ྵ>`܋Lp{<\ Gc-{3?V3$vȃTs`Z]eIx`_#*a[bu6eQ ;mZT3X}maS0fG.yHl<|0G[2H1L@ʄ#B6L1FoAbeqA@/"/DP'*Qzϣyh F`kģQ'[Bh`3w<[@@ >²b1qN|8i^X#<β)74ubWUHv5Q& 3ɷ?Ϋ~ סr_\O@P+7X s[+v6eK piqz7-cU\:v×zKR63wouc!n{_t+oFThE?[z]l`jAqXDs3_|(*Pg y 頫z,a_ Z =@'-{A&^RL3QjC~!Ny*P5":Yzs)c̅}7 ,:HRY\L YC*yGDDRǾtns Tӫ^<ds0L@1iJ-&-x.3aBcSHIs8P3(ȴiAyȒVF*Sٻ>Q|Q It; jȻ Gb-L"$31 Ati*Q}Ok6һLZ|vv|Jz-$NDTȆ #aNZfc.u’4V흪v7֭8\IY_R)ӥdR8xn~ tTsִGo[QpY6@v:SlE}huB,6{ChUxLEc~VuˆUz8 %z{ _-P'*p\Lh ucnfW/r-๡AMݚ'TsU-8>]6#VnpA#e,h,yA,EΟP(¹y|k;bR ȹH@Dmx&tbR "!/;55wجpLAHiSҪJ[OB^5sNǗwQ Ljha>9 ._SkvPiuH.` Yx'Ec9!9B7YhCEk5 5nO^0xK5 ACkOP@{u $Fm0a*OIiRL M=͐ps⤰˲݀qlj64B8zĄӪe%:#VAӾ֐lq|l{ 튣Du> cM^ - k!,.#֡9vuhlVLGdX^$74o3IODžPZ/eh `ӬӃ+4lHf.ǐ6RZ"tN)=6~g,ֶ ՄZ։{: U2:ꕫ80G+tE<]`71iģTF#C}& :<ZIEע$`G:^ DKiQb=s6yo k̲DToE+5@0TtMƪz%մ'o6dling0 8p?%o9b3+M@+0y'-J;zU('o-, |=u-Zh~:ka6HZ;iv{fXK\%܊D7yԲ cÛNw3ddҾiy#qgMS\T5;OhSw.wYnR̽Nt K1eJM*VB2RKs+&/N캷-}qݧ'Q1nn_4wnuDD1< "}~\ 0:%Ʋ)5T9bA#[ѽgJNm/nr8PE#A^Ka"~[^X{Q#2f\Ϙ39q:4z/btіMsU[skjTK<Gp_hm 4ytcvPe+򨆆4D?l'un]N}#XܬWG 4շ]6L6&-7_n6q~sSxQ\_~ժkcQC1"bv  YƔD~?kh Y*5)%т@S jbM: 1! 1nȚZZ=|6Q@^R$&Ro=sIZIb9ADd^oz Zyb8Z {Mph:!Pvj7oeg#- gDd)׿ /B1IZ[a琑D$O5دpr}Eg.cO5\)"c@zeXH@hUKp{YoRJ9ݬ3xxOj WKkzHRm M`6nXqH6@ف\"]E~֙f q6>JI]Ygy[I.ZǮMnH"Q)gVm5ꞔOFc^!YMPqDU 5N{쟓#>3:܅ar4.&O[ZVXr_q;cntp*]?0 F^3~gU( l{\OQi?P 8tCT۞\>q`:dDv^t%Rὺ"z%ȘVr\6v{ն4 kD#$$dc#PX lXqec*@xzh?O"M]\ȧt'OίFmðYD6H~\QpEĀ x Qr6œ=؁l:M/7W FJi!r@Փ)aЀĴ=A6H._ E9fA CSX]̲P;7co>JpfľhD0⚡j tc_wUוd=o̲Ɓ\^meReV=mO4WK"ސ<\K mI;79Fy^sG[&i-xfiKLV}-fk]7O*ԷlRGo0٤xS4Ħ}6`9hDAސr{j- dÖScQnyJuLJ% !KerkƔPUƅhXx3CgTXWf aM[a%@tHmO/mBqr 8ҟ9I8](#^yz krhҪ|G0Iz8FF@&6L٫3i1?\3\" .b%Ggs,Av7@}~c|k6L :`b{TE$%6$['ԗv^igDb뜉`׳MG -ZLloh\p zlɹ_ ~PS$쭨/T9ZKOfx80/O {3uBy&~ md''apTCo=6HtЅe7C=p]3ܲ65+Z)@L3Jys^ .3]uV#& u^WM~4S U0xRl)M:zՀΘeD%y:n⦛l%Q56\ u&gLJnn% Uy>D{PKzs"#da>M}^yj޽U [ ;pKwESsj>c)΢l3$B'$b Rڞc>0H[] - Ƽu 멗*B@4괒Z64CZm4pnTD[??wEP+Oj!U 8߯y"P A}JRNnwe3&lчQLZXH iǑK. |@Ts4,w968\ w :Ýb&MLZeE;ܤ/U/Nog'Vh0{}Kmk/AY-R'𺼜%,Nve;k^͹SXW7(?rɋ'43* chvz]GcYI"x7"R@;<'l@ pXŌĞQ 澀Ʋ-NEN)r`Z݈uf09TuI0UC\/!-<ά7*DK<)5=q} 8&DF-R_^љm_ X$4ZK%.%_xPt$yטc[a;b'Tf#!W˦{t:8βD躸"u; ̄ BUy. I]`eNeDO^R![1I[KR'DXZ֋^HCk!>dcLm%z킨5oD{Y_7GiJ(+?M!fQxOoS"ןu"YeTENr+!;j϶ā ݁,-|4BJ!$PWsq+Rfel,𷢎; W< lҴ{)ʤͣ`*+VٟÇ.`4 &(Rٹ/5_Ja0oH2Ta8&~5op('o}-l GgP48aAICk69E( 9zәO:$ee鳛Wip܏点3F1]d?te\7˰w>.:TgY<]a{!;hV]_uZ,2\D%$v!S?9W ]2|kLOOD5iX|1m $qSD=g/B_i%qO/8 ErpJL@H}ėDct@oWZl*Z0zXĻ{ N)Rr R2iϑ9I~v9{Sѓ;F1:S:&ޢ.wQHҀSd_KCxwkF#Y.y)lu\<h/PLGvE8:1!-()X (}]<#N$nӚoRm_#cWvOrj#zCE~,gO1KG~tNyL@Qm`O ^^crk!|5|. PK]lyfŀaa: J"%IDr-E"Wuܛ-˱ײd3;x\# 0f]P|8a &r Ǹ0!-x_L&pwU$يh&ߍ,SXjs潦×`lOvJe7QץGV1C~B€&09R 4Uh[Vvb߂Iqzk ;$m۶=ҪD),3`؍XyV]w mhY ZCp9}:e*|DϚgS' gᏑgNW֒x%[ܳ@}jG'lqb(coRvJ:X!MQsM?/e@_9=W+-UI@3ep`=0h?l3` #i}`$Z3|KxilRW/c/0 CMxQ1BK]t%xYOD ѾS/z/WӁuK1^P_7W+|ƶ]>̛@,}c  3Y'jcJ[IJ-{B?.I-ՇOU;%8N,"ryX)!跟zyNP%RbG!-/33ɳB9 M8U .Ϳ} uϑJ_ G}'>yl17dv|9XItӶ"WmrfRk/0<|kGfz>vվ WpŹpxa'F)J*]tA:w x zai=`&'B-Fo>G~oܣ\[Ng5-SeƖHL,Yv?|2l$Ǯw)Ӄ7uF.fD{wbXJwm:Wj<&#s6LacI>U fXYc7i]른81ʈﾒ|7O͋ 2)J̼={ATc-!IuHK'8k\`y' g;pB{)97o m`CaPwa6_w])vX/hsgʎ^7a󘟱|yF3T]: SBBH\Y&cQg硊;l%pzv39$Y]]*'8'sGI܄P;AҪ}(bL0܊|ZYIly5Z#˸b 9`\B넖*E6z#KZd}J/f 2Ɩ(\:a{;ݏY]1*Н+̤gpQhwej8_ ʷA\ Æa#7%.4Q4dFN6cbJqt ]u5v/O~DIp`d?uu츅XQ`}."`HW'; [SJ&hleF'&-3-HjI)vy$&%+LuAa8Iix tZ8'SSNT[wXn ^]SLPU/C[ pY!U@wxoI|t|Eg"Wrp̬I,ua>lnKffA#UgfdwN1I(TpPWCqM_y0 Ct{:* M?.6EjxwrYr+- (2xBֱ'x:~VnF*S+Iiy'2cRPŨoN9ˁ$~р6IkL`Ej`?s_>gd㥄?`@h&y7'LJmO:쑒mӌpiyWbEd`%dJ4_o@nTxV&a=ZL* ʆRE)$UqEwAwzp8q^#6ls_dsE >u,gnMS9K#_3 ȳwR ~D|9Jq\4`gzs qsHaFKR".3_6vDݖ& }4k7*83fDy7:N:I~ :cVY|۞@UthzeO $ |b~Q`CHA{2!@or|lu *D U9vZuwfQ^ h^?+,x`m0 -t;Ҭ{^!AE|%;ĉ^0rG+^G۞1a0I2כ TdsxvacIǦ҂ ݅olWF|ԞRH4A3,*]Ԃu9;"'f/,OwwK$L:iW99i?K8.k%V,fGM?<_>՘ գCԒA]*SX|owY5' Ī$|V a/-ݦ)E6S9T+Vmf~q6XJO[u4> dwoΟk۬ $ |Jflچ(aY> }/]6',h! Tɨ<]eEj.{8*e9M hwE #^,$+D)bH#gN"],:2{,\G |< _/R|cRcɯ 6G7+ ?G6\ςuXc͡[wHѓ#i@DLpo&@O>GVxZIʶLW[U* ͋pBq\D|Wk[-}n{yX7>:L7wlsDz ]UOuՕ Y)2k0b=5Rs,X ɑQjczr)n|e@1 rqe.Y:G H)ۉdA2UTĔR4Bj|< 1Dnjǹ -x@v{צ).i&I,˃HTKFF[3Ж^Y֗-ͺ=DYϽfC(H_QK( > :[WC)':1Y@ 8LNX& &-ƾ<dGЍ'T= +_lz7"`7̯gp1sǵZ[п&mVbRWdf6؀k$lRx }t\ f: *o8jO?եD扜+Ԍ/ v>GK{]b9Gm W<xl/z߲WRxD@4ƝТYz.?c4вؕB;$EC+ QM`1`B7tg [z-gG# Um]FjPA'kj*:*FKe{U5?F2ǘv%CiHď^*H7ld}smߔj>˺01VeНh$?zMVRӶ5$qfxU>˜gw5Ou f#EE5XoS XQD#p[[x WԢ5%6`/ƕNYݍVBſzRJG״sKWؾ..h#!yHODB dP{7#>q%^B 4Bf$Hɉ֡V?E0Ÿ"cB9WXagE\2VDkr*'p 6TyOV,`(OS;bۺ{vCrsTm~H2= ;ٱ=)Yl)oEHJL_# א͢D*%}D(ɣ` n ^[p~7*"K*THA‰j hNPA.$^קQ 엺rd5_.Gy$,1T `H&(ŕ>.^˰M.#vbz8ugezٔs{lӺN[Q(x C>T2M5˾?Qi nX0~vxZȶ`b.uxQڡ_~#eE& E|$77:@W>J%),YDܥd ;ʪO e9h>|@Wxj`(̖aIF&B6T- uߔAH'v{EZn6.*G匝&TW3*֮CrB\_uWJN.K]{D:ʋ-}XZNhW20>j?paVvhYPoq AOH~z$X@E} ?[HnU˕jjkh`k!s#.FFk`mկ#imH6=7/L`<2v8 =~>~>>d.4[Uf-)LJBBkR1Fٖ =Y (3}8^9MQNW1Av"=Gۻa )sbV9L@uwZy= y_ i~K0ym&CwSZ V7˖ְwf7L0s_7**F2[b#Zp# U6 PĠrj#*OF +:B} ęG:{J^6 ז OG-?b{@B֨`#h6#o|7<]$Az&o֩S I:wG#T0l(3eH eUfe],dcB\:sN$-`ݺ+O}p$(6+a@J*{&FNÎȭ~Nq[+CWot1Yrn%"㢠%752]G$s5 ?ŘuLj,\lOS.XUUʧ:u,]h: DRf*P` {x·K'`HJv}}DmPr7[7t}H`T!#0ʿsz#P^`oYcI382򮶵qR7Ѹ5]pOΙGd6c`鶎&EW3SqdGCE0@uH*O=.-V5zidi fmEe~Vfgԟ]1+8Xf&uwsutfpWr]""-LZ-TUrڌ Bp~2v I;С!@GYHeF)Hdʹ0p޹gsyZܴ54ܗ#DըJ]U$~v?'p؜T 6p)rVGoH c:'<=Ԙ0n`gD5u2vǞC^>)C[1܄e2 oY{P蟗L6X3W`R|!U9XrPzsv+^ЂRTDTC.L QSIDgW?^n5{g7m {'gDViшu(<<ԥV__FJ~Å{.Iٮ0jBOL܎1I0B/:1Y#0rs2E o׋{p/G( vO>_ ɎM Z 7 o4]; GB|kϘjd E!F̰3wBjvqxUtU^R-2-BIɑlb*ga="JcP=35-Gp0PS; t+_.>V m*DADq=w]HlsXP_@#-RM-hT[y΀zjr雛dV{iybMͫ^[dh%[+q7 En{ YXBZh{v@`".}*eF)Edԇ%(:G$+4{@4pJ STM0aaFqɪuNAVNeߐet% ԓpoM* HkU꬙S!rOwwoO="^ eBCmŏ.V11T&<9K""Jj jLl*I _q>>Y橇k+`yS,(.\aWP&&G6{Hmh/'!/FkNs#QI3K2đLІ!eB807SfϛZUgCq`Rd|g+3&4Z.051Ect vr/n˷񼃵 ++e+PY3 O9,٭= Gc"ρ݃[9 t?cpS bؙkX{t1r2'j:1\}I`]՟*n}k]^{|P`0Z<>+uWw>kMLH֙&[QO*Yy SKp-RZrU)Q2N87 ( edz,rb̹wi:=Fw T4 f`zve.g$3OzKs}Œ*ͷ"k0jdxڤgCyH@1vCaP%Qvr $:l,ZG;*}@se"_L#ۭĹV2\$&!$6 3zpF3Nlv! ;n,-pXZ*u]}eΡ{/j|i6g܋ ڰBUr13-~Y]2qwQwslˣow/6eaJiLؼG~#OᧂV?u7k2NF_5ֽ5?l YAG~L˶v-ƹkJ-A AK`jnl:GM0x-:l+z xKG-ҔyWވ.f86AO%* Y$yNTco>X4&T!ʨy/8ijll"0l 3QnD{p~ *I1a0vhBn x ^ Umx?l {r%~g: ˁOpxT3KrsP̤u)Aߚ?i"й/ -YZihCF3/¶/!hx}>T 92Jm:ZCMׇ` Q"^A ջӪ aMVђ*o/Lt7ܦt)<ׁ6V)Ƒ/3ҧGoX NrPuwX;ONCLi!~RUeT'(u@ǁ -V!R.-Ԙ!t9IoуwMg=\JoE|J7 a׆gyTx\Uy/,@p-N1ޯ[Be}R 8IfYȋiion BȗV'`EM(BmPQ"o`1 h[8S}"1?$)6_xO:c_FBl֎exvK5jh' ]0! QB]@$E|ns2%SjP[۩L"kb.,NyDsLOJ#Ikcn9PCa9Ŧ<ٓW kYb=3eEdQ:#E01Rߕ}m{ݿ:p/ <ƱO3U4̲`@ PNBOT^/|_n!xi@'TGryA&\_?Nv3.(W޳jYfsCll ?:Qtp1Gi6Ms߷wl XϪFI7 «R{C88b~ Vh 'hHrQCKB0+kWBNfypBab(eBpQ=x;Zr`F? W1Ay7^\ #ݸ4¡UX̼|OaSm.G{`EȉKqft#k?Ԯ3pVuj ysoC5#*LDkI6fl{vWcXonUl/$C#'NBEJ |@Sx*b0H۪dc2l ؕ 2注 3W=F 8Pk[69?ݪ+_YuEH(#İ x \Du&Ȩn3Av5'MpUʉXk.R/tx`oQ̟y\bgC{g2)"F>WI#=C5%|> <QS g7Z&Bp|ѧ.Le߾N ;jr_2;{\$.tlClo\NSV/ FIJX9RPhfg ]ƅ?R>z-ܚ깅#4~R%Xĩ-.L"U0Nڅ_$X Rz.f3 x^o(*aiAao=,Z./,yi.@7氆%ԯ`jl3 dL](.l9e%:P 9Tc EK-ᓰ6dNwܼ88XC=?vN(J|Js%q[KK~H@E51n7\JJ;*'Ӆ]9h=Sܢ̴*xJ8^cPl8@,TQy-.!Og$%jiVYGNz-[/]Ip[Ku|Gi]ꠤO:͝M0UܒhEI'7=ϒ!ˋr=PAp "\IY߿r~@jHpW@+g2L7e[J@/۟p/{"cUNTg$ _k`aQBܔ3˰Q\:ϫUK1/[d~--\Ɏ{:"@{eo.q'.@uqcb'rK֫םB?[FV?,3Zh;7EOWC9烧 aJCW8 ]UBwYvKv~=*iܩÚT.t a?xBxC φ-YQ,^>/(%^NXvtxa}t0oIt4S. ?  (^[ Q T&,a{8b66CBd7byqَ2C3'>L1V'Bp`.|,o[ 6-{Vu'kH ɼ5XhQj8ϪF,#=̠ PLF܇L\b_!K}E8eԎ#˾wٴ:DA&|6z”t&\f߹h2\1cGr^sd'ᠮjMݪNWn I`C7d>E /"AtF!_[hv1Dؼ8E%K!VyY]o=YJaCMm=^rr%u2Qy!ݓQʷb zCjL1F#bQ̧ݭ 7Nk*Rn3h)pv`Y#Xmf'yB-ZL-K:$Bg74CgG2%&c9bN'u|.,ix^Wl aT 2izasdc!k-Ca̘Q'vQBA1Zm Q6јA"g3D=pC =. yt K)UuIf:\ S8 Ue4],Ǝ(kxR.[iTs`$ t6ӏEq.ؚDK- |-B*PXAi>+r &{%wU;RZ0 ّK=2e(|֜((M!Zm%DLk9S;-z V4.\<8iM&䮸 Oϓ zC3,J}J<鞚a'Iiͭq?!Ey\&7^4mͷDr !Nɱ. +h], ݛ6rykDmt/Y3y^3G 5}'!XeFrXߝ1]Dn *!_/T؈hqj^3, "G +Wt𪘪ʵ{4- KsհwmPp뒆kx?nEEӑxK*lSYTm;ȪD䮼 j|єG Ti\EM܈n6krgҴ$'Vt޳*>-P\m Wī%-D!q6v8֜4;j6FіE*'b4Pd\oد_ p}kWo4L ޅ^@].5i_$Ӹ)xP?Ge G! α)12ƾ[KɊʾ2J4NoVVjm^{2I7?0p}v5`ˬxZ]#pk;}qdQAyV|@xQnd8 *uKu[L_%a| \.x}C#kIQDGkxל&$l79)[2"tG!-BW#ھ+D\i_Cɦjz)C4ɋTDw}HFaDp,>6_o㵮8wū.s:lDp1b%·u"eWqL~~U/q['(-ja~{=cehN@J=5#,2pC}+9;)a5 {!*/EX]tۣR.ӣ+SI:3r@)6uMhk\/p *F+{_)9D2bY%W5&:dTD3g{: GĻ?IM h` Mz:ܞw@O1 sA ,œqœ6qP7MˠdTLwdj%7=[u@ss25}-E1k- kgNvP7>tcrPqK(CvY"IP[o4^]:XomH o~D9r\B=jrR9)WL+[់g"ļ>$qD ',_鿨͕PΘ2" $3;h> ۑZKpj\ǨE>`>Q;sK/{-(҉z"ŏu.*3 _3>lGA!'(+c54Jmmܽӳ vyiSwKp21{I"XYt:Ĺ&[GI{aQiP!L7s[݀9maȘ`^m#YX2VRuhGo8qRPX8z6ȲDߌK<ݨMgƁF^f>"c+O`xqi7;w)w'!]\3.ʋJkns[HȢ>OY5q(䥔EQk1Bk^a$f Fެ|#}R+#)Eľ2×JCP8v J u"j,9찁 II2aP!,'v 6#ǁ<:zA[gzɸ(3QG' TAık3VUF&U`}uͦ~CBB0E(4)a1 !3 lyGGv}@TuZ):E$dVXg_a3fmgTʢgy'+pQ 2xb!PdsƟ# kycyY$ZO% hݱ AhJ\m32 C)sI z(wJEa$H~Oi.|'9ΕF4QI#?W3Ogpy~yMtň=B!J#B{ XNܺdRǢч ]r[[_*?JZmzʬƮVˊ$):- "`4uų( gJX%lV1>sKml@iڭG^wHһ%a 9gl(47dOWBh:^sQ'0y%^Jߟ4?~b 08>/^3}< zxយ(y #~đ)2#B(ߝWU|d ˅QE!4P2ٮyec/"txBwy|㲾ia'CU6eR4~ V/@+3 bɵH琒,r[S׊wFx0r$$kM:tjOb5-ۛYfHMaЁɄM)g oq[T-jmf>OTDga/s_ncf-, XD[douSv37PZlSZsHg?JrPnJq?.%,1Fs~ow9Rq89|;?쎉+YU̬pXca]`$.:W2,ųJjzB*p\ľ @̩=JJ%S#0$',CKIt \ 5{O|Cpc cYƼÓ:NgL^9"Njs4A;Is`b0ҵGR9&bDM 7g |{<}v6^b_GWA?$*gnP\V́)pKx]n 0+ADXh(QqĪ{e)˱M$./p&G߶.VTCH*!9)7J5*^^ȧr $ 6.|t0y|29 }hs0o47=unt'hTƣst*NIUQ`ZuŘ#38NL|WF/%ЏGb|-Lf!Lڡ`?)O!=`ΟL' 9EgbC,|UÀ]{(j0A1SfS~3*舏rx#d.7TR8e@WT1̎!8ki9hh)&!TҌdsK'. 6?vZpFTQv̖ZP׾ʨP>^:0 _ l>x%9*Q| #M`4̾˥!oo s=S#Ig\a, 9 =>uF}}̠1͆~pK*&ǁ)ioWYvӈ]Gp)Q r` xyM''eZ準: nu S# 'Zߺx&5=n'mq#02bUqÙAZ7ON鿊}d[ЦG#-13j\-2 3[j74-I+E" 7JcƏ?[_^b.*cO,Lyqz9x;VdWjW`NTCŁ ;Oԫ'=F[x['b1k8/ xJh(=Tn05ÀN_,z0ը3DXbdߘ$q(&Q@r\ ޒo,MUoi'6*Pv+='a_;5@QGRfq 6.X;$ΜQj̝YeZ+2-h?R8'믓 sUȗC._!YDV[e`VɑjTG/zJw3goC@\oҗ  l"\hdkyBbtypkd3Vܝ^m|J8=䒦䲉={#<ؘ IX3ok KhNBIgƠ놂ޏP`& w~n `cJʶ3swZT뗁  VeOũ ־ ~Ly9{~(z7}*L%v@&;OX&xMNfXda3@`bސ.)5qgcw@Y̟h@&/Qz1 N3&UaR zhy i1y4R;)c[$/Ljp]S5֕}"./|TSy4̌.+!gψ.?H)&^؁:>Uo[9[;&BԎb֥bzn/z`6V{;sCN%< * wW&4:$;l*ضmy;cAHZt+{՛!b:3U?!dfIwɪZUub:P{*Bk#77]tqn4S'kV𸴙4 1 Vf&T|5HJ S<_tx3G^hՉ/S9t S>Q?wϼYj/J [ XPG$׽x AHC.j3Фh+c^Dq-Tah+-ci\&0%K0{G0-D ҵv)=Y hy]u40uxSpbu7wbi1MPnvzhx٫z؃%kwr6\?D!Jе ѫ|I*́Tyfe0+H{'ؐCyyqb;zH<_fwAr(꣊!lLKEz^#F(gkQQռR<aχQU>W۫VOP,PY A>PR7aT zvVl$klm`VS̋ۚP@)e57%dCKF#{RF|Tl*~svc%hy׷N;7ՐH' ~ŊK6.$=F 2\3rzsME<(Ny7$e{~EPS'cFw6J%eLԱ5pcഁ1z7^y"%D7K@a_->PЁdrTV3JWgfۚprɱ zsc>[_#ǒrN# 6G9Y}:t ta9eϟbJx_>i@bCW﷓H6׸Ŀ\vBʞc\/.E}:+&1[ۀ|[|7"r}3pWa(ffBy I(n+ 1C~WO_ Fj)6M->xwʌr,Anfs%dLc+T)>X@jXEMu٠ [tmfKԞfܿz&#"_(~eǡ4$j"Ii,JvSCKnx Yݎg @^<_%]=n׋umHX%{_kD}d? )¶"4,t:d *155UUe<'%FK]}Jgi{[:SށWڲAffa}`e,=t4xs GuRY-KbMX<dM׷&?N&%$8,xo@l~K lϷJqĿLn?eטס4yrT-!~ <kpFkFf-4ü9 3]o EW=B+& }@ $>aP%}޽-ZU~!aJq:'{0NuϯmHk2~]ș?$o29-rBd?{JqO+qn}mb7f"QJޡN AP(r Uk96/ކŧ,/|?X13d"c" *ėuvxj>ag鼿.uKSzVG.m@ y+ľ,;KOL{h'z]nS9e~PPJcϺ+"$wg*h69w4+,&WU_9H̱;-xx?FMN o/ӨBeT# "gc6ڤj&TAaEL*Ij38vGlFk>=s*Ɍ[MlĂ?q'DYDֱNgx2j7K~-tt,SΜ"Ĩ=v7[&[z8N v tʷTLU/@ )bȾ30ݳaӯZU|v4yW5="ZpU 5_7\s P4<`iGgY3* ʼnHb>jhZc P~K i}eb=Ztc*5S" nloK8:g<"zVFľDžbhy [sgDŹi0B,V"r/ń" Tx4lA ~GUX >]YlTGLeA޳vsϣLA-ʅ_嚓[]N%~edVwqpw%棡x/6sVR$tcN,i&j ֫ӡߖ#6J{dz W)1Uܴh؇tog܍ * y=s=yH'ED4]ˆO60GdVaB5#R*23sTX"0Q2O#J80/[-Gt#d4g$z7|A'oBa13_uja`܎F/بD7 #?ȘC^+n#gv!Wn+Bש4X2w`XM3xLȩyf8&~4@X]+j&6/g1π/!Z}J>3UҐL9u"q~)}0ҽ2B{H/A8etߩ9LQ>1L.$ᑰT T]:L/s}`e]KJ@|%YyG[VaP0+43  @>cŵH=J9'-z[veM53]osџ~]x9[;Wjb~x$HPgDbŨl5RP)tOaRR_2E}D:f1:,Gᢼ[< W7tꑃxǏ4VTؕӰ7?URȢcByUBް=L6`+L:MSb`}AQwba=rg~ai)@xh5dնOO\,)})~iە-,kT@4N襎tjwфcRvAq46&WqWOq.\UT?'z̈@VL5@sȵ#T8 );vo=;V L)0H y /ܯ4I)nǖs 2Zfn݋`{c5!Y(wZpD1A8Cf( ]F;ؾ(ȄnǪ ?zT4ƴ) ׁp1Oywi3Y!,&{1} z}n(By q+O˥)a\TKE4Y31g2b"]f̄sP<R6/-omyL%# :)uA\5l<2WMH@`MU,|ρ۶Oz"k 4PGgFN;c_vpBrd3mY{E Xr7wHAMIM@{W A|lW鈑/aqw01q.*iZ5#mէaMOD@.P=UaR>'U.hB^@b{ynb.˫+9C$=mvIä(?}~ۗZd?{Q\(^i$3%UnX02W߸TicXg>?@_]ʌOCZMe%ku֓O|9[8PG\Zk ksk~'c˶t4c(X4f26h.]zTf A1QVSp*)P ^mu=U3[ L6{vvҢζT&'meOxt%%c,SLsfIbOUE9)NqnYW*iEv yj եi7Jk8 bœ hs+8VC#.Wm YP٢cէj3Oۜ [ *"H hnPߡ'1vU &ꧮk8ɽ(YJR4b/ )j]*?C mގ ,I%2v08;ϼe4n,ͩHsCL:*_Cկ2nکB0ɨ0XҬ7&7ozV$w/taN>ntӷ酨;O^~iO rU @kM5?%_vG1?3iq6>B̞[e<4;?|z!ӘE|s&IRk%GBߞ6F PmwqoXC9jKrl ÌǤP8ȝϲo8 aRZu _$3K=)P!|wQNO;z[u!K0ErlY i6/#@48y)۳%2lTn1^7N f?W؅3Orgۨ1ɝ)q "^]117)~ 9ZkM/l5J֦_γ1.sH3ɕ$L//3bKq-Cv($=E-v\JvdN"kr!O f;l̈́qS*akވ<->KR 0cwBBLD#}-UTTB 6.!IpZ2kt<9깄DQ []̪zNh(*h{#MJ}i55dP9F"Q {1e!64cUWrQE߀HG<KsDQ/A $^Y4Q$~A@CN *X21Nf8vKD`AaG-50KΟ @QK7 ףɯg8a&} >b6=cC];L]5ӊ7f!'])TQїRHjx(E*"/dM "f5zIT !/77[!t<=z~p3v/֡C͆IΫXgUԯ&yx3i=ѥ{-Єő^1UWN?$|׌a]408*rp0engJXOe(* hsV,ʹt8!u<(Js+*Zl@ ^cs2lś<߲MGr1KbVA3ug*/R1|r'?UP8|5[/by[#~E@[ ǰ6k튣HȜaXG?CNjmyAR=97@VԵ~qь"]I\.3=3:7v~(Oe ![eM!PuXW*K'FþR5{u13 P^Mmqt#-}Ϯ߀74Yr|R#`NZ߾GcjP.Aģ!TWMBgӸ\yH[ [99,O;VF1p'>ֽM\=Up"S){vFC$7czA S ) 1y;i$A$`pH:)>:cyV>⊋أThHȐ*ORa|oREu>)㤲i%熒LFQ0f 8d@]&x׋+ƾWv_ET}&L\8vm,YwB>)S#=gŹwݛ2JjN;A "7Y$ Ӎv!ivklAM9-E zi">Ҍ1둃Bk,!V,6c^2[B3ٺ;97[Z=[BFp֣c,&gCH@SUZMSEJJ&/6JA&G{Ih\ybH./&57֓\^ѶP~R~{M+5]6tKPM%}u2}K-"QUJ =QK<5*Jjq n(Fh) G#kEGIuYcd_ A -%5TMJز JręE RPK^- om8'ɱ q77Gm+?~9йD8})t _νh'Qg¿aP%rTVot^C>%ì9wCMYߗ#Û_ͥZhRWLq%>[ߎoCŒx%*+Zp+'I+L쯗Ts*RL82(ǺZ=%ѭ0n=EJk=Ԝ[I4=캤gt2)Qpz)Ԝ FZ[ɛlvPC@pW%EVvwR5-c/XߴQol0X Z AK5W-WC13pqYuK^Fw?1Jd \;i-TֿG&SN iT3# ?%ΨĠ|-צf06r}rR_ZzQwf?NW#gi~c=1BzzvO\"!(|;_4D3 saDMv|Ȯ&Z- ]9`MΠdPh("Ÿz..UݮQkqu(>:"X0+ZLs&̘-/=#6oQ;,68Ƣ1PBU_!ٽGc jhN ر7 ~tʄW? D˾;7xu,o%_'^c*;=7'1y)TCTn/~ '4%B!9=@;jHֺE#mD5Nv'ެ<=F@y6GN ԕy1ߜـ e:6?@Q  )'Ęq8#ء./dIhOJଠ^;*5P5tfxflg]<s7Ynb͖ll/iLJvbۣoaXз+qA?V[ZZ'Tkn" +0s1(}Rw>]CJzυK.@}6l&5DNnD_LTiRn&p3[.i4pd\Nw%M?}[kBL䒉iHZ-$)O"'OB >isqBU#ah\iVMA:l|SmFB#8SZyŠ|Vk:Nx !irF'li2ӑrp(R-`Y`tyYoYJ<_:A“t0z@3VXW~lZx[xmH#-B6ˮVWQKhIZDԿ ;RX@n8R Wn)Œplǩ3IΏ O=#F>+r~/0Q@ǫ,@;NVH]/lZQU dhaC :~V'Y -ۡB2+a7ʢu,\XËᄡJRɿ`;ǺÄe6ˀܹ΀F5HbV={b1RNF|e)чua=JG%M\L%}BC|w8A=ǫEyF`0O]꾃?eyHbј8sw5ǩ5 p CS1y'b>3DmJ#OE~0/Ll獔@r>[|uuyH(XRb]F\9p3vutÇWϮf<Kۯ%O{M6-nlХ7tnWL/TQ|Apu|nʜ4YPd|0wϧTΜPcR(Ie`aySQbK=YP VmY+ %NfI6#|q]|$w]?&p)2F{U}e3\ziB2#q⺇ap>6ْxD&q¶ކ`)?ɲKy|Vٻ +w" $!j% E?jڕv@Y< \+: 1S7/ t^/Jd"` 7K_ū]C`.놎C[~fR_2ёTn>pO5l2F*q:2D@ 6˘7Y P],r(V>ÄwF 眕c&Xנ,Tz ؏~lgI^o;pcb޻Zj7sayizohODaA}HB1o-ϷIym-E6vsԤ4mƓbۛ5?P53eOz}"a]/Cm 2 uy|_v-.֊8.s^\.r"'ݹA4f Jg';#K%*zbn2Y c>H鷵m*4dWz|Z$^uq;s5OZe "سOPi159*ZkVtXT'.\avvS@NFoOnHjkl |QJZ+3\xDE8gtsFsSZE ii[ Kn`A$ژC1OÙ9*+abA ;U֋OZ{t^ȯ豁u/o1_>_Ix6;NMv#s9sdhlTUkdBXm 孍iNřUWq_fso 1E>Rid;s@ȳ3&] td SKY}DoL.%p NqDQ`xq_oYCYgE8D]5A@#-{EM7 b@[ˏe\ɳ! Y)^< "C!bK믻y% :1E{b5lԏw6xS2{S!E;I25ZVe%@W'xc"bb!K6O c{qX͆vVl" 1>l.܇es2 řD5uȁpcg3bvcxyǰ>:$u (;d <[ckyiRӺ9B/ڇNy} dI;7$G ;{)B +.k]t1jyYF^}O %gqnŐONVa5 37&<-LUM)^dKl=Zrbi!!(KtsKr/ k=:Q#"b0aS7,=\!DG2Pq0Lɡar+TwT׷`$IpeNQ`щI\a4kрiz򘿥UF1q=SɪVE=[=$ił!%PD} %?o1@WKȟqN>}g؀)}lߠ00Ul<Gph6k=fv8N =W*$&Lu}j$_!{qE{֡j<9s:dyQr?HА"5+fR8]0&k5Ig~Td-"VV5Y_> qG' ,eGO9rx+EÖHQFS2YWț7u}n H,f7lu"rP͡ICWu8==t*Wu,l z׺S-{ih]˳)УpqOq 2Y7x AH#HmL.9rc`zŪwM>g:xBa^v,"qP!9g^73 8Pg4wmj{R b:Y "ԭ!63V DP#QUe"MAtd9 HȲZ\7?,81~L/^5\lE .X-Vٿ*@ 8/v05l+KeT5'ō.1zH}73j/<ѧ #U%,O|LcTRZ MNCx;CHМui5YpacBbh/a:0Ce4'l7gJ& Txŋ@t ~~~~%Ӛw"#.%ǤiyJ*`3M|@o-2#zaHHEȨ^R'ZL5=FDDѽPXM b~5G.%${CQO2bE`^MP49ќԇM MTm^eK.@=F62ܗ+qy?5P@W oo\!~׮(A@>E[%gu0y AESF2 0W9o=h@ oTfDD:)i\j#tRuiRXx6jC2Z0xuqC=_2JDV -K0=~G?Q`ȉ<y;C@8E?JeZ0^k-lv=`D+CoYdž'%аj4c5 Gy:ET0q~k]R9LFىޡfxPVDIGS.kyHEFי-<:\*nowd=dȸe#[&O$y )z}.·v3 >$x'H ~l8nV_ϊ dS(}!Bz;zeU!H7m5htsW89g ^8ESK=u ُwSL{֜ em)V@Ϊ7 ݃>dgXiy3փǯO*eZ@kLKNN(Ee!U16ý?eI9( ;)L![%v2Mq|TW@,;ù YmGr]E0J"ZWԺ@IfYITݽdbK.+[Ny]x96vu-F ʖ[ |WSE(RUֆ#eVvtqγ JmG ~T+qm=TsC.*nG;"G>Jr2+C}cn k'a!C%'m۳cG0%C? %HëֳQ hoGNlS# !OTc"~UE[tmk|PqXоr#Ј U楷x":BZ6 ΘfSjZ jBۈ>9m+ /qXF5gUWlj;z|8K֗Cwe#-G5VX$*mlT/ц@üvkp1g(Kp!Ē6}aprĕ b>>#CpmbRȻ韧pYrTgΨN+qDΑ9C㠈:FNv(0hT $'϶{nJϳd!)ukH ‰ڤ8B4omڍV7YW4'?՟'SD22^_@ X~ KP zz'܊a+%P~^u H%YvIlP > @OR: -,_Id1GnY~"Kdz3ЛGU_h(G[ekc޿C1Q`G婈/~~1 _4 5#8wԖUc{:0qgfA!6>*REyE9N^NR+(v4#u%CԚZR|誳wSF)}TĞ6I )4!^' owKR H^-dsW!Iu bؚ$>leI}\yXrKī@qm[%F!Hwyݪ@ +cVY:>C"eh{b)‘ލs‡llPK+ Q6:˭uA&&*MR9Y]/MV-?-R,ˮH }׽ s9mfjUeO 2-sM2\z>e(1,G? "6\/th="`;sAØ7sܑL{MsT50bo$P7~M6L[ ܒ KJnP~]ʃhhC3փ$G+2eBD<+-Ӥ/kFA;DPJL'R(r6Ø~llt0! '&Y̾2 ¡X8,'O+`F DIO5c5BOoBP$\,}hxXw!';hXy|l;PspX:Ml&xSTis8;7qm+ĴžzJYiv$C(VP&|A|=V)vZ/}rݛPS{j\Ӏڐm6%-)(F{TN M 2a;A> rFjWpa9VlD+-R[;Nli5 37.K /4Híeʦ~Lqm'OnLaI0>+Gc`j6i:59l%3(y#.q__vshCP/wN#cD2XX[<!p`mg0T4H-:G'_xմ 1WzBW8͙MzPT$@#Cٸ8smqFƞ:@OwAPM)OVVf,Ja"H|OG;>WnhʼTz*o-Q4J~[dÿY1dgP+@q("F,F3xG>h H=oEk޲;5*oM{ /d숕%o0#*ҏ/LQ5l#?QLFopV/6 ]}Tp=ꎃWK Dw+yJ[Q!iُyMyfe=rЋ8`O)m ѐ*SirvJ>3H8jϹ[J/L/B*To ?4?=v#gR46(?R 0ő N fo.^%!ʨ߻9t\ 85=}a{4ao2q^/W( }"믾#s-#R zQ{]YG:9}>N_UYRwjo|8Me@>u8Eq"iWjP$P]$|Ee`Nó#;lrh0+H akPzΦ$2RbV:z{HzöekiM|6y]VmlV i3A(kCqc(ҵu/]c?4MM=+՘ ˇ{r@*3REEFdV^r9 &tJRŞ*F=9vw@IK-̩h3<$L> :TdFѶE|t`rhΣڄPyABO[IQ dG"|PIc)?掏DKhΌWJ -lW~$lVő,sgy0XLZ3n0N> !1@oĎ9|ZyfE{߳J|_A]̓90⺭/m\9ӏPP6ʹct5wk1}mí-bB,,ʕ^^S4;]4E7DPkԹ~.1|]?Uc|χq61IDtV~_R@[h8 ܇qjav5'ULͷ'՜F Ei!u(J3k\"[x]vM/s}z)n9P@e'?7!֠gO'B) YS)R'=3ԌBό5?D+!w!d}vѫɧ]6PEaxTI}<(Xuo`:t.}QW,`# ?7Dkh<*I]"CrDǫ$1%Mxi)Uݿuou Ug1=lLF>'H;<ف?i(~onv3KIl~=~嫋g|Ҍɑ[+ 8OM.$<nLOԞܘ}' k誛' @QC>9Q4A$;33:A gUPڮ$J9t]EFZaz3vO?1O<'!/Q#qm9>dp/'? 3lP6E.͓4ADeG1 dKFD]ZȬ~jUNQ8EvB||6w{,E>.Sm3or?ty>?qx9&Jpg'7K%یK'|eĆ..C!? OX )ڤ!~>մ˄ͽ0 Fs ok$ QG5K垚^ [P;֙o*M_x @_% Mjأ(HsrEߕpO2cmѯ< ^\2VB۹o)ja?8F 60N ciq{2%CaɄW3Tj>0?a]=ݶ}41HūU?:N-_|[_ ++v_!LTʼ5,`⬀1n]hhљ3$]C1Bt- `/SGÜMrPT6|@ 10uzm>?߫wqREj(PBD ܽ_-׌,12l'A])olCR-yꬫ3z_^fX^o|>1]OD Bf \&l-AYt:Of!ފ}x0Ul*,S0 ^ӽ 5:2DQOeՅ,$[GQ|As?a0"ݘ6x .ղqWR"z͉){ aJu`HbFM~FMeWTV;-&;Ҋ)^C?yVc/2}ڇU z$Du,>=Dzkk5r+4>)y^ǾL/d#k-ND0=l!DzCJ~uihlW X}64(ƉpZC|w5.9I=[:/a^xW1@I\[[wfw'K Cff*sv^MOYN@]Whw燵JF-ėi|c-tzf(Ȃi UY" C_4`+ 8l=5p5 IMM6m1 KDqdw6p-o?R6oʟ̏D `=ȺΖD  PFI)|t:/xGI$F.Gd ohɝKAxc0$A0Hyy)$ܧAΔd kSipMgXy{!&5=+"v skM"*|~/db,Tc=Δug ykff::,s@Q\ljZ/sxk5E"31"vk3`TDڔM >Ce5aE.R8โAGe~[wѲWU NKTIPeJi&'ǾWv~SK9fY-5ۂ"r 'H' px:Af;)Q@8L%WμQS=9UiY2zT1: MzƩe<뎻]U %7Y B T74Uotteb(]ܶO#v)+鰐>sRml+Hʊ]&o\#t¼`jom?ibSqHd҈¬ݨb;sQ+G }/'pDۍT֖0h85ցEFA12iYqC˕!ᶧ.j=UA*_eD#< _ĕGKfo26{_/K:0ltഔM7n4gr溜gT̬v Zy:bɲCW}tvj_1^raBoMP7i n {l_RSfx68e̓uL;Xs7yڽ,1s3J4@dZdYTuKl%Cma2-tkTq1 aNɿr Wʛ LY I{lY>5VS}Qq=]gp;xhzJ.-}`D6Zr;2'Bi0a80䴬B \T_ k1r=f%5 f;{Ŵ'Kݺuf[.}yH;X*Hj]ar2ܝEts|Ho~?~#gXg~u9ǐb2 ;Axi(~K. jyMKtWL<'X s~gZܨI#3v Rox]=Tf*uF@nphGӇ%F9{-,Eɷ!Ԝ;6_؂㈹\Qp?M2ƕLH+HFi^Ί 6#0uq?4SUkDa\3A9V`Y!- 8}K{=V0n?e&@ ӤcN0|/w59gO損dv*P*z_VG翁QҼ:>ugc鴋ɐ(բUI2R[B%\3AR蠜~KX@) {66'bf}ܽ"?q0'O,:8hN.AhN鑅7 D~ sgHXp .;PXw;7evG9dlZ(b”ؑh "a;@ (9i䠒YaYϖK>쟆gt2# G]I#"pDZ|r ~uƥ s31Kls)*Z‍yrX0v +/\Jyn'E˔LҼ5Rix,X03@T5UZs9n.R‡{5"ܮݠE򻟗ФbM%" G ub|_w[ LNfil}UbM O%;8ٿyxMe8Iۅ !Pi޸@1e?#Oef+[@DE#sSnJna8q}9J Lm? }mm>Ae&hR^%Mvki&$ TóHpQz/Dr: -R|8|}UlMۜy"W 1Yw<ֈIϙs,qnux*(4p/V,njNsֳN@=v hDuCk .ФꃡF#t>WHkJ)a!2,syfgT\>%l>Є0LGiuQ6!,? ”HLG4e1}B.wִ2TRyAT8~d;aQ0ܣR 7omHhhvUg+o{7 JU.v`oqyzfjQ-b\p2LfQd^푅V1\ΛHټaaP!:ufsĎʰU-l( :~ݢv B/lid D$Bn%}xP9:^ݞJƔ2)Sw^4|3o %oX"ۀux{6uSݺy9AUk)XAv9xeU[%]U%}F Cv@cوO3YK  u}`'w*1o:ZB -^=4NZWynzmwt6Q9\?iXŋ߭nS 3>6.wREyFSi^~z4@ٵ~Gi_(%%Uh w~5l_pc9^ڛ2>' ;I q/>lf謷 3@P %wIM="//Y <ژs ͠K5$ZS.!m׎їJQL|5Xū＆Kt)/ѭڻh9zXѧwr@-b@E6H6d!_+'OkEe2YƘ:o?!V2ܢvC[cDQ/mpz 6c_cdzhښ~ӂx%8G)< ϯ3sCT/{+e>03ڸulȋ8S%L+6ln4r-\]l:ŏ}T()>1\!l+++l:[jK8!R[5Hg]씛V4FO}K7M #)Z. y>9}%"EFMV fN1$,{9L6GԚd6oa/b 3{/P!} rVW\a:nCX_D\^inHN1-2_)6 h;"K8gBѬO-(|V~?ĚG1P\id/qDb)oAJePOpQφ| IVC?C+Jy*MpvKX9e^gv*:k$|i]ٗ~T/y)HbE6<{ ɰ񶳁QLB@К]*Vvۈ~\O wHM<䃔^͚!tov.`wt="μcͭiS 26P]"y$> < Ϊů+C&eyf8b(R]dY b*^>'J:ZAJS,;Az5~PX霢`ggKfn? W,b HSp<VU0z!п]jX())NDNlzwpWJxVo CǀdALhEܳ("Yjt |ni(|:wD*F#O@~Nh;=lwC:2iRM T*k/7&w:g/>A7T`vr)P ~}뗙5! ;QH fk0Ié)"8ڈm0|Rڣ[0u+9Sň3vֶ3jπ}CN!\Ȅli7zI ؽ2mz`zvƸFs dji~b8qՊu8\ݛ3`T#T$ZE (K3 }e&B21B Ds%izYRM=y^_|*vbH.aߒ ok@w7>0ߦ(NʑоEuS`̆}. 6\|E8R9Ʉqk!Gƒ h9_8^܅_H>hFۜ>FFqE02]Eb9Z{SkU4n,hX$ӀWR_U+mB`Efgׯ2d&wlٟ..emA~ %ӄh./ o M jςMq#( JL[ ۾sR^oERC6q]o`/_p(`nh^>{rόâ?nCgv0k1x=wU0I!m0( jݨrN2OR<ZRy!Ÿ]Cw? Z=aMp1h!C,rV*g0MfMY 'qa$PX5`H'6 8Zrfؙ+:q!"lZ&EX)Zt$O|#YvŻ]/1rn2.h,AaOvO[a)}5@j-t 6G_ Z> Ug8S籺`<DXvN2UQK@"%ߞ$9WIo~oeM.=PDA{g:Gdm !?,F&39ʹU{C~8_ Lf9#ͦƀU Tc!J/c%Q00) n73JJTmȽ42lJJmСše0xBP{e빚`i`o0yQsK]!K<>T뤛>cE&V%Yw]iYS\Sk(H xN; ‰`o;Z;Ls0(!N)s +݅? 'z.C98JY /æi ֫LOz9XT\QS'e`ɶ-IJe,):%mg 1)]UO, M dK[.rYV9ASgj.I_gTl*PcplIYWT(636<Ҡ廡֘ ` yb6)Y ~?R.w!roiC裘oeQ],)Ef.kzBd[I,F4QMcaEINhA"J'2Z}^gISj ?3{@VE,wF_f!e3 %ukMoQv"x3RfJMͯY*BLM/JnkrܯZ/߉[`jDgӮTAfwHƦGϴ~FT=䨺#ri*~Mފ.IT ^ epce'dယny3a)UY9\F2ߩ# f .Ľv(ˡT6ٝO<79\>#ŃZ̲2CJzץGOw`|HjSh~iPeO1; ^編O?f>naG!SpC=p{uDP 4a=W6٩BQ*_S>f*7 ܞInGkXԚ-|1+5` +^U>SZ3؈1K_[s9ClO~&lݬK}Nor| MI7?Pg=]-Iepc7̾P6 50rMO&iX棱]>f ; n"Və30%4ZEOPSvx 4գwOw.b@KU[6u1*;T1F1'L&X0 *"c:<"2"c $7/5Nޥn$L/Y7+AcbDUJ'?h$E2oPʚh1T1y qm.6>ޕw 3Y4OW2HͽԺ˽ I1(oXh3Ѻ?[EZ)VdFwbM#42H1\\ȝ&,2 0X{KjAP;#Wb)2Kz~īR@Б@q^̀u}U\ Bۛ׆o򝷪Y}.PC\~~?0Q--Gx鱿{LAtZp >0f 5G{pO"+JD8$I :o\.Qzkte.:1ՄT2G%}6ĉ:&,g3̨xL/dhiֹ|5>^P O"$NVmn.5hFGP{hۘe4Rx}3 ›Q`M )3؊uWjS& 1Sg6P@7Gq~n9ongobLcZypQ F}71 ^K6gvI>~, ņ Кn*HaW%?hmZ =b»⚈W& Jц2kf(,w@J3cZkpPFAҥDC]dɶLQo䪬g-:VcGFT7/449BtD74@w|&aa&nj*+ry%psxByGˁɣf53v*G=b'(RR Ҡ6.h օxuJ}~t*!XO]lt#"[Qh֧|v (* Fl5),B^SxH*s j.oT>=P6V.?h@}mlrClqjz17 # Z\!qZoj 4>2aJâұRa.)G Sؠj 9 gp$;iA1S8Z8] sZRwÎٌE)Hmv*4|L"+"#, gBҫ3CptVp B{#2kgCI&2 DZh/SMPDfU/rS tʚU8@QO9+-t:WDq;wA8Q ës>4Fp_/ɵƏip6t ڭ:-ao'ðtPxf  E%cJ Q|UyZB?!F{.vݤӧ&o(Pb%wm8űkϋ7VS!yqN ]=It t)4}+%sn1/֞eqVUotF2jolWL Ve!K((fy'p[vP:/+ȗR{U*6Q" 5cxڊ](TuZ'-c%P(1;g$iao[ąF?#{7C{?yf@&ۓ$V,__o1,fL+D=VdآCn^pxh 켲~QI|`t&grrj5|1E_#u! 7[G% ?Q&bwVx^2%_=RF:_T-)^եj-% vy0-QY;9A |A9 1I7 y5o4jEMscSS`?鐫p] j>38eg. ^׫G"֭Źqj. $ވZn_B`Y%57ߠ!ka4ԜOaRmfgwOڬed8oK:xϺT$Rq3+,5T`=ǴL_IPQdKZ=j8ÃtE m3xwӆ'X.eɧ. Y̤Zқiم7B6Wj2뒪ͽLā}#7hU\VZẁaQ&7I13z9;;zyrT"c^Y\WG8# IM*AݛTV;8Joso4W'kz@!M`kGEc6$3|2鵴'- v VGN/.!<ؽ|9?A3$}FC3z[BäqD9ryQ6_9*M,}L+h_Y؏yJLiR^BoX(]PI|З,N5pX fLL f#`Q` 'hc VαE(߬POsh| 8GMd>컠< ֍vv^иEc 4Qo!Q  T*WRJ^3y7[҉ܧ`rќ z2RJI[Z5oHc4C"{L6T͎h՝I:zY[j L4x sհPH oI澔RY ^\a%'࠽_<"Z~L'o߶iƮ }pbv  c_y@E K]\<$]u Wt(aZ8{u(bNkdT`Q\ug{KJfq B$2ȀG 0 =¡0"0 ?IBA]"Fz HA"a|A4놑4?$ZwyˣqM›2DJ`;X+z= dU Y}K0TKx ]ONᓦHP{Z]S=@8c2>qʞ%1a'-)4J2lRR{Ii;QkS»URT'2䵧gٟ^h^bgN3yGa$fMjEfʘ-Yw.E 14T:8,@Jb3&*bz5|W!ZV\àm.O]L, ?}Ҩ&B<mDi ZžwdcvGR'+J ꜙ9H-D?W`­h޼F q.4Y#X(”Fj|Qd͡ciL!iQ{MbZd@ׯh{^ @3Ql0:j)MEZ'328#oUR!+\bFvAZN[,jȓ}zSݽSC {.Ƕ Di|f.%xe%WhK$(U(+j2p9'pSxRIRg~H)^C>UXfპuZAc>?L70ٳDn!y4J_< FQֱaL%+|~=>gvPd%,X@)H+bkP=N( 0u:5 :lEO]l S9:ElNwg2e &d heֳ͛v_t2sISaVWUN,4 ؞8Hs)M-HNk $|4,vrxZ8:f`6ruLރcҒ+=0wc'"Vk684}STVeꐍ_t"=mfBAk4A*3k}r@( ^3-\);/=ά (zNg6i`/f ܗt˜l& e=N鯉K&?*P q+r"]=FD_EYm'g]_cs^SiR25? RE Mc2_o9?IE{6IO7%)!1T;\.!?>*lb=1OhHFQ=뒐_Kw y!s[exDyG[C<nS1b݈0'Ot~cPG-iH>=^#^DLJiGOwvqVyt5jqэS 0cdӒuVٮb3n6Ĵ ~ #EquhX聳M=$m-ʻ>]a[f؍ w<_K)E ]E˅?Ѱ1Zh6H HzGaXG[Imow]&\kMdܤ-O=4ߩvaoh3 mxv` y֨DA G~A}fTla斃!ƓErvuQq @ 8f i DWP1- NE̷ FcႮY"oz^'Rz(k{{'ȾSB^ȏtD7ݺe4F]A]dn'Jv'c`*rg7B:ZޱXnuS1rCupHb{x: E7_-quTFǧ[z~(w7$GsJ389卭YӻB/Љ.7q8taIk?(z9φ|η\Y@<3@P)*4ru*` iBXyfS"=#^ S.HҙVI9fԂ`sY"TUD:A;G_r?TG [*X/ٝegw|F&J=q|HbVgR:R"w- {wMziCE"[-^ K=j _4aJjP{iYMEֱ:yjdD/ePzL4u)Cjvnq2aVn/M 0e,J.@mJWm,P^KCZ-^}i!웎ES{CƵv( tXb9($߁1p暞g;VHItxMP< a!oRvC3c˔?1E0PAӞ(K5MIscz?a-mBQ^۱ W\sDN5yZ!珓DrCքҟ njۂrS+I6IC3pG@c DidANL Lv&;TFRx}vc@hbY2%R&(1I<x!J&h7(ˤHM`_qﷃʥ|LMN瞉t-ޕ[mFGpBF4?|^dQRRɳ[>10unVۢ0\vM\TE4m~,=qvYDb %wTC$2}7fX 9U0(p᱒IR뤍U- t0h!o#$9OmNGݗ?΀!ܯٚBnȸ 7s WSl.F\=,k"Y%  خ\ܝE\τMTbo6TAt -2v̄g9Ǭ<U 41ğ_Wȝ_<Wc@ -u.ulJ9U3h=ʝnc8͏* HaU$<9GKγ Cl3,51v%sfVw_FaF;*HDrra=S t]'z&1jo\:Ao#rFuۤ-hV&ld>c~/8n#:cO<2$Rv\:0aqծ[8(nRc'[]+,?~ۏC0-ndؗ]{ڱ6ST %<]GA[aJ %2 3!FOK)ҠUYz7I}ڡ4;j.CGQܒJ.W_wwAa\-U꬇f::OUH$*_Zgw*K uz~%pȖcF́6?=4x!5 Jvbշa[2ou<ꉯTQϼ{D39L U2IuJʋxUr>01 omr)T?1vPUD8 ͩS EJ{E؂;KIhP nߘZ- Z݇\  *(23xU:'E٬- GfTVCQ_0N=j4>Aޭ؛⑆MfWc&p<9$zXG0 e]*mgci a+'Քxa_)BNa MjB @7C$Jш]2Py Bzm=+cG*߱.Vf\\m`UKfnh|T˙q^C]qKY4μ?P/LE!K &i˟1dO E#(=(B"}$2\V!@H8y("<^gIz%]=/\qJThbAkEd @aS/tnq:Rc,cw 4TnSai5S2?/b-OӢċ#1kgpe)-) klM E"h43^?&ؑݚxM.M)44dc:j[|7tz9mV&ω3`Ii&}[t+eTe/t\7+A(tO_loilC:u^@ⵓfW{|4S!˥֢GLT 3S\ܨdӿq YG:QkI܊"$)a:pnBdٌAb#a p@/K`?$* ;`LRJ9 (xw:VM#R w@_э曓Xw:^Cb Cb"CebMM;jK.2}>MUpCƽb Tm0 ]D6h3 >r28@pF.="*L\JaM5,xk9$(,%ނnf={G{u RDZ`hD\!&E[u E!{u01s!`E)c'}uUIt޶"{iXi TCGq(f/%xMBqidZCY]oiwjQA-X⌥U|J~UƖ=ŵJ! ^\$p$?8xa  pa=R=TT]S8,VDhu0K&`OhfILJ.W%4QY/pdͿ'@ %n~ Ǥk+_‹ʦM\ՏڌM،e_Y8A6BRFž*F6X6nqYxpZ40WտqbH_] 6~1ScBy-d= oƍˋӆX usAoL cB|Pk:"'wWIXbJk~(0J/r-XS-Q -}sAi)Ur]M ʁ6Y=a\0oБI̅ro5K9D"S TmK\јDJ7sTIbyB\93wOo{ڲ/B]Uc}Y|*Cff_ n\ˁE(ԝbZ0pVVI 5N|{Ia ilm͌/:e/6KOؕWi 犢%ߔ~6~TfKXFtd:ca" ݉kc6S.zJ*%OVlN :cx6hB⭠LHbt1؆$|A!y^!0oD:IɴT̟9rMEg綷rayQ_|MX:wiqS2gȜw:g&wOeEss~J3!Dnfs-`;3I<o}2Jlݾ$Fy_}?GNt5-dKQN;rb% W+ЁR^<%y KjlSxrAҹ7tXl$bz+ !aof Z ,'IӚs.t"}Õؤ]`С ý`z=Jb5vƑ*p7b^x~#!;N- L-oSw%6Su6l83$PΉ+Lz|}!AC.R} ^XCH;<|-&Q?"%9.c% Ŷ<o(6K-+U Pp <'9Cu%] T8:gn$C~O\ܪAy 8VSfxE'pPkbUi`= ]$q6.۞<#af6w/VC\>K&ݵ;`b[I#_oE UE^3x<m9u6=ϛFz/ Qc!Įgr)Z5m-`l|:FvSH+/c`2MdYȣ%Eڧ5z%CbLɜLng4 ƖlEbÂESUSUAģ CC/z *vY[ݓT iD [%_:BQT@ Ry`u02_ҧVAww=j*bɳ_nTDP-iw\Hm R7w/"=.\'exwNWI  }ag&yH,DɸTN" k3OL \uoi48ݷq(8+j1.P\k(X!BBBvϖ%yk1!":kwp#0f+`J(&0Qf^~cv-״(Rډ~!&;# $>BGmWA?oH&cʫȓKK|˫*qdV=18Pb#9mwNԢ:*RQ4_ fk{)~(3 g"nQAov4+8b( 4w꛰o|84}M+b!e>uOG#op/D*(h*n&Gy@20g-6(2. ýUӪD?KryԸt2FhmsY* 8mB׍n駳~ wxRvejEzh@3:l( |1uR[ȷDԞɛ윔T $ew)*O{ l$DCRcV/95nJZr@rxFtT"~Ay@#ΪA _?]ylh6x&LAQ|^)w7ZwYUpmЏD._+Ϫ@SF_dѯ>);J u[@nl hnY)`-K@iֲR-'&%_'%~?y3a`=qs ϞDۜ8U/voq9鼢{ₐ|!GZmV&JGlT'|a6?]s\7UQ2c^q70p5х6#EFCg1:e>@}S ̪gOgXz9Tly; '0 1^UR0ۦN![Gn┹_̰w/X/-Ou,=tULJԵh钱&ey+^n5ڑ,&|;%E$hy<H3r$k #ch֩S ` H*$,\-}lDv;'6}y\("݉\*4'Q>+nl?̠%2t{sc 7WxлXe 8Czz./\DR\Or WV[u h\Voyw,Z5c tUBQYӬCkF#v&/n΀<@jBQ&PI%e37w/ 4 wL1$>\HzB|vPm(ZFK`ʜi_38G8}$&eA ~\!Rqi:/Ӌ<3o{>N\Sgo,*I- =>OpژDځJ(DUN$ҮH XaʯG:.]c>g'l#5 a(yS)Vy2WEBGs>2~'cjV:'Zt :2<~r{н%/*OL7/yI WF 5<pf2N vjDbjږ'0y1$:_P-zN :n>إQ~舍 !NO7S ðcނ,f\"u< @Ź!tYzPe,ɥ;Mk#LIMU̙kyr//LB"jwUi=NjXyGaFšy8_t-Mlw)k 6֭J5Bְh3n 6h޹?DkTR7eV}}zO b3ׯ h1GV֓iE_`%W; {U=uHUT9dywz+ [w6TG*&bRJ ߫@v/Lpmb_?|Q_Qs7` Qh=0"0ߗw'0- f5@tHks@CjYSf/4Mk W>b22~uyN$gAqD3YσycϺkw-IWT&̉ r|ov y an d $*l+E3⌲YSM\/ =R*c0$3g`TyOBѕ+ L_@u\5@E^]ؚ[bL=uSCeZ/(18ރcXVW*5V'KlX2FAqjcg8Y9|Ӧ٭xk "DQ+QʌVOTي!>AxT!*1H5?qDdz?<Ŝ⒁9P @jE$R`ⵊIx>b]u`r{ӡ־K0>-RGsz|+^ZJ'=yx>r@^ӤY͓Qvf~adHO:|͙=8Hyg{nBx%=H3͇Q7qHؽ-xX!ï't[s\y*ճG.zT7C߱3GqVo 9vzU'cf IaYQ " ,C`Ӓwβ`@9yU“|ݕ"vXPdkZ9LtTG%>g?+V lt 롞8s䵏S׌;aw'&qGn1N|DWu--sMAL.(X4I %O~(őx(Վ|knYb$ W/~Q%Ak-L"&Ψ1n|E mswc[R}Y(_h[qݗp5BZA(_D| "}^NCG `,%'H3?Z-1YU1O"zu0thGoj OOE:9T?7t6/|XI\Y%NZ EY9K҅}fk/1eT^ sq[<$o 6yLKshXm4oebPE1tIJOuĊq$GKn9ٛE Ezw>p'FBm(n \K:<#|gJz~.ZSOŋ4>߾E_U^OXV{9hȍO{QԆOHiL朼hLj@Ҟ =Yq4kѐٛ(N^I(0Id9Z1C <+ -A(Kb\/*c&3 VY/W} c][u hظ=y@[ ߁ѦA5(wH پc 2@ڨvRx0EJjQ |qu.:]7GW۩hВ$bqY" _ZY`9(ޱ4b|?1i7;a=Qelgޡ< M>k5dR_Te'盛:LK0=c'7=U> (_5V8qWs}0tkk J4jpdsdƋTZ47 MPbt")6nH"o?Y_^[ЈNŽTS=xYz7ʿ WK"sW܍JNVBg^%N}թP294p挼 /$-#JS#qYoegKknc;uh}U~tJ+S4ēxmJR; ې .%k8~.:kR!+V׺Hi [Q>Ҁa6 pT/[ Ply]QcꝨx=}NU(uù-26ie6048 xuˍ\km[8U ZZ~}O1Dp&W4ct_ fJ޹{79ZX_ ?]`ϓ+Y HG$[B\6w1){4۔m:E?4J&M> v\jfeY~U*F+Voɝ=K@Lt?cGr!Z DРE-M:p \Az^Gٯ6VAwS+3[S灆(Uۘɷצk@5Yap!zDD8cJ{ng8_@D7WSX8q: 1} zsk?b)S3.-|^'v޴Q`ADJM B`րӱp.bi.ݳX~KR"8@)/?Fw1p%N3*2i߄~>"E8zeRْlqQ>Mt_Rmģhm3r{$ՏPYd T^Pn!ڋ#ӊD$^7՟2iFzz"BPV!ʶe34BjW+uDYsqH :=Sǰ,};GGff6{cjLB?NlqTŶⅇ" EPCoCME~u[xXL,*6لy'ݗ pR8 ϐ o(G. `pʘճ3  HhӠ~Nw"$"-ł&ZOXCVw`QS^~BzAmdX jocp;#clCyLҮ5P/XhSGXNҕlv\7 ]J5w[Uri-\_ ?/B%'~s,N| MMy,m%6)FR&)[Qt.G 4hj1W=YQx ÉGq^ m o,N'я ⻟#Pg :=4m>(+ȵ|)]|dR"'|03+|]M㞊H'Ν+T]y = tPY LhB)-W9'X_0X4>fd\9`.hwrwF&dascu Ãi.(錘SaF7ָ{BMp͎zwGYdIӟz}U,`e*WDى-pwʤx\eR6a=TOy e>MdY0'}U"rc)t¨Ɣ ]M DUE Qљ #wv"8hv Џ[٤FJS[[w#&F'J?mm ipp;I"L`Td#ېt%`b2!"Oza˚b 2_+~rr[qvrQ*EJ`/:E h;ELvo[zJԇBo9/ 6?#6C:(g!ƅ!&P@Dh9s# 3F#ܱ% ̍jK[a0OdĎ\ô[$ׅy+T8u}xqTBػ1<%B%vH7[}Ͽ !8D6Ǜiз 3)ZdƗMYDŽ+nnqMU@l3kUnϩf:OMFOQ ;X`'K iagW+e<%"WYKXHNu''.?RX;pajb) '&j_pb|pLA.8k&7^q~qEJgIڿ&ˬ6NQOaQnbD\ \b#_p< E=u1ca=u(Vx 5:#bAA27ΖNۿ84b@R~*? F?yPu!;v(~ (Xq EKE<]WCTbڀ12'\R3L}Y4tvd仛k>-fȏ@W:v^_zʓvvKRsԲ9rԻƷX։X*tv!@ -HsHz3JjIN1;+\5>Sr%=)yl|O&z]OjxyZ/0Q|bpKTiaFt-3.u< )2ל5Mff9O@JiٷyU64JЇj0< _Ȓ8D5:LϚ]Fg\(6SNK?|ЂsĀԘAɷj$u&[eg~%χV5U#!L֪"qOQJQb?<oYUJ(ǘ R`Ҟgktǝsb cWLYy'\'P5E@h puΈ8V\SAzr٨8SfAgEF&2l=zrfؓxR8V셓O.)#ݿۚ]s"46STVSE0!5%M/6I_rk|-0^mir 0Cf ,Yd '[ӳ";IIwO!h28H(PaVcF!(V{Lf\nJ 0s= /Wq]BQw Rߴ~yCGğ?iMX2_ }EX 8oyX0cdv8 g _Gv6{z ]!IA<:ΑMlp<d%wvZ$"Tw?<ÃCO_yj "{ۧnN9]6g@ϯqrZ% ְ9ָ.Ѻd8!zǕ==Z(nnej2+mBNKR*wv,N# agaͣc~i˦ۺgRTٗ_Z 0;Jz+!x'f * /e P}SȲVym]W];ߟheAxZ99eR8͑Pjg^9:7ZY<+ʐlNX#+j zgR㌆ nwhi?pb){_a}*o`߅ N"^^ՙ'm(oOёPgӧ_^ 8 Ǘm /pRH&YeSo|AffBDtK~4).=SUνPšR - @_Be C EUسjٛ&V2c2L@QȐ?W,1,8!xӍ#AdGyyDidw6c'a.C8O~Tɧ_ɲlʇvyҍ/mߞe@a;U8RHYz|+Mx&Fm @kNʯ [֡]]>I)W(,pؑ&9Z}=zxA-oΝb H²p \bzG;_O{Wzw`P  _+ (vƅ#@Ӳ8ߙ"ǍK'S[a8W.B>ʿ= }9Hm;u/<\ ,H8@ KlGE'][D<4a(;TĒǔ6XkΓ)tns* )ke>`nr,C/w4)eSQ-4[Wwi >*R]"pe}JSHq22a0>epl]uRӂaJ:ܻ:rcIs8.Ba} 0iG1[ ʟ  :Ɩ$WX!њϊ4#bOj5M &SHAQ|H (bvќ;cS0#ݕ{=޽@cXq$*ޅrkm,^V`q) { aMf~O(e[; xAOdOX1KE7Bu 75:߹W71mQ,)O$.NzLqk13;*Tq=nB2y|M̃5 [xo\5(*\YCw:Ӭa_@z 2O%?x¹Vi5 I"Y8 +VH%ӏRמwzӸ$K@ IYyR b'1GEF"Kا24=@-*yǸWD6%Ybև Lq'ϣb:T?7YCd{ڒ9Qc{Sș`Nyl5?8˻<듳$Yhͦ ;RuԘ]xȁ?"ˠnC sy0{'A"-١],mJB4MUD`E4N?r2]/-Z#=ԟͺ 2wfMQwj5ltbd$9[RVF$BE(i{?K ,_Cf="t?O{P_phgE볪v檩޼6~or_uZ.ԍR i2N&92JR#agI_ tX:ފf[̉[vY"*%ĕ%׏}wG$8>B%fV;P%Lh>s_]"0 Hflșnv/vKX}I+?cRq\S"FG&g皥\XiD{d6TwQp;rDFŅIfoSkCn@U *Nr~UZ/&pa\eH ?ݨnU} ۸0ndz|[ZBnWhA:wT<5`.ˍm#o34 lFE΃"_[~kΤpxq\hmp@asWl3]M$iW\UX'a?l"O5=PxqbaYk]ك>lМIBxEM.f蓗njF72^;tu8,_IJ͟}$S;P_k2J8Mb|s.ۿ6/@QEkuXD(7*eAgхѿ*@+rеK\:kX*2O"LyC֯Cu~4vPo7" dsq-tL<)?3Ht:XZ$4fMyZe~j;MH%.:X!|xI:9sz݋p>2r#.o;],Eҁ$nwFTS0-fsQU/vV(oAC^S12@uL҂{3z6L$V RWuV꿣*B=t|ZY]4}_Bi4bژsN>l9+P (aIh+G;;=OmuJ40|l-( MG:Il" rPNŀ54")@A"# ) ) Q׷rB!=4Bu 35I*kvw^^q(H>}3ަ#4FI}LlxDABX! %gn[!8!ZBdwխ,jW[Ey(d.05ᨢLЪ9TY41r+hXD7@⺐3:P&i$ۂ+3qᡈu`HPJ+g:ߪX-:}8dmns9;! vQiH;AOaI_8 Ib KwgxFǿϘ6H~@fKWQqJ&PM?BT_lB@[t?}>ێ$Yo©Xxb$<܎.+c?29Q|2{ hhj_FZLb~?d`M/4:ކpjV $'=H4 W҇C*LC( st]^Lj}l?<܊I?uY@F#M΋ a$e)Nmk+RKE UDĪx0\⋊!V3KJݣ>Pɚ?ApbX68C,( N!pDۇ-٢edy5Yal;kYj'\Zb)2Ά9LX+c0F}͉/":[ d=͈_MQ :[J/6FB%u49u", -qD۱݇M͡hPl{-C7>/b]녧G0h5DYzejct̎yH@PyGqD; )_)̘MMC\ĮN+KsT~ X8Q}O^ó}Sax.=>{tT =级MBm#7l: b5dfMNյQnE5*QЅs}db]wpbbgNR 1O5~123f)%Adyq1Q ۺdB*$$61K"LDkdi,HB9&b/&tH F~ZrpD5>%ڲ!צMKq&HI?26Q y73 fĎwp"PjEycVwY؉t36AhfV^qʤ OrT b%۪)eBrz&S֡b[ n r&G Usřp\E 0쑎H~畧vӗf¡F훾-L΍|nyQUA9 ^#e(YbFk |0!NNI!d#7* >ҹk=CmTOLL `%G)ߨQyW}O<*K7Líe33"6xDF X]p`72'2'`++HFO}/$q@)z8uy Qk%G+ǀ1l8 F-J g03"ESKL׻(?vXi1 1\pZ2H/v5}T?bE,:T-,{ƣ.J{*vLF:v9I!%Jlا Q/]dKe!֐۽X]a& B._2iRDx6BЩ3E-(Mѱ/1E,E$Q*`@ׄO<%bB2pzRФ1 KX98ZM5.Nv @FO7g_#f֥ZI|xkU"Fiu.R8.#}kaYέ<etuc!3ZLkLv/j#UA(LNjTb6L8"v6, L&\Ws)` _eV$Q_|rH`r)c^d.o`LR C8y϶a1 p&]78DBg6gY&CSzB~([!ۙlQ% :- bF,JaҶX`^ew4D,k뺉cˆmtR2')P}rS ٠6Aqo_Y,4@6]pY ~K>Omlq9iM&ߞq*x睻k?4eL\4j$bI@gT}=x!"_G~K oqt2 (Ig~,e= =lBgD<cY~<0k5桼Y_ J&@hb6ެH:)@8>п0kOش6/^@gR˃ a hhܻ%(f붻rb̗oAhS%F4yDɖ;FCz]_6QQF&~}1q`ͮ~uzKfcH ?X9%ewiAc 'YKz1A@vx'%ϰ+?e , #5xM ߹Nl3o \ZI.@V5_XƜ }ҵ2% 2@NO;&Y8zZM[ `xHWV`yxf~D;(j.V l~h2iˑ%,Vs?5]v1W ==rfh)lcj};#Dh:zii>R!ťҋߵEL{88 0a,-res3kKIvf1#T _1oӍc(jgBǬx$.}Ѷ_FѱL\+K%'M2XJ; +˰;ԦT MULɊR>)apZywEx4JChLH:^^7gCѩ#] I%m#.MGMbS_jλ}5P=ÝBEϝHM =1>KaZYi-Uu79 ('vF#eB|*Ilإk*Twp<m9D3 CƐUGsO;YCqxH،1lNcE3*:GT*r DɌ-rpqͿq_.9ΒO|7myyHq~s[N/ozI=޸6ﰉJ"m# qBET:ޱcX9p6Ĩ"hYL&qOzhԁA}箾pՖh_ģ4M:g`=4mp`($)l 5zF(՟68y^JKGF] ZjQHi8ҳd¢oq4^G`opχ$ P.TƏ&^ L3XC7Cw X.2;|Ȅ &ti1ǀj,KUN~!%v~)J']|o\3$;2 #HbО|[Xi~jsehTL\ePlu2izMmݙ6&?͢psUaɣ1~ԊLlB?(Ea>E{<QamlS1ak1$~mh[9RAd96&[7d.Uq㹽4¼(jWpj]SV:0",v+剶1̆i8<~*ʺI2+UMIT6{M#S/U(1&&J&>-]TLo"I c\d6k~T}fV캹:/-) Gʺ}~ܞ<о{E?XWуD%/R_^pZϰ1@gtLtby-o;zMtf"I/0fȒIC=FA pyć'+)@u hgu0)Х0WJ )p(ߕeMF̢PCM낄,Xj0zqx\ZmT{v- *L@ R?o̅DKggb ZSdvK*5ژa ? WKM+tz<Pd%˵:#jNҺc2? A,FJ=Kpf h jaGV@}w7/봀 c&%ª%VjfzweՂlzfPRcO)cu(ck}"}eO0d\kk(0@+Ol:3xSeC>|NN'_hNf/;:Z+ɥ/>ӌi\ *c)arKF _Rsvǵ01xf qWQ/ٗηO|0J?SPN$ ~\dϙK6+" 4qxMEI,Z"yak: ÜF[[Mo2+ 4T'쒕=d<69Ψ=?gND+Jg4mTr 62'[ٙG[Ʉ\ Y'OMUEirh=TH,k}}>"' S5xԝ}Ӄ#SR"|:t2t3!>EBo9U mxQrA-!#R,!7(' j?z;h:eO\ņPUF$+`KB:(nh([Pn)85/,X/$qNpE g }(='ddNDL' RG姖iKQPr<+Og`RX+gTT)o9m1q@0E-o?@I/ʻ^B:mbWXrM8oݙ箙O譜-Qyvݫԇk\'ωQ)Bfn I9t2FmZ[凪n)k!0fS=77+cy(Itmwvًͳ.4@sREA:9OTIupx])/Yɜ3FgdJXt^nŸȹ2zZ؉ e0?S/L;&Zdz֖O,l1~%7HRUkndۭڽ/UŨ̎[ :u[,PY4-8%5Hm]>}_P2R{DdrDԼrTW\!ki L -ev?u=R:=",N1yv :*FOec+ҡ֖6 Iޭ!Vn$W;vVd'9.hspQlrj ́e^0U ˵ i 2**EG$՗z`}9~۞/KfSo}0@xOPJ?VG w@NfvIF0, ~ztC;a\5LBgnc!),}W=mzɫn(mgZ#ݮIG8k\Jyu }{xhѰ'4 2z gj!q)n ]kd=WԐk#,Nccclx%2VƏCڑv Xt(.egsf KRȽNq) 9eݦoz%s~]9ZtKa_*A֥z>n- ET FM.k&S<"Ԭd`f.BPː]"% Y7:ǻ&9C@dMa/klCͫ7NB(WYrЀ{1eGVM2+j;~[PG6$h1O$BVA'+_wO^N&-Fm2C2Q{ \X5i+Eg0~U~Ui6;f|CC@vԈ%ׇ}+TՖ6z5wg>J i,7vF5 49qPSVb`O%~0Nݲ:2~O˩_{I䍢:xFoi;w3q-DAlʚX=3:S:(/:ft:`MGQN2t3X-=e9fW]%L8 f.7FDZͰsة'z{ v`S-óu:^7ڣ^x_lJ/JSm:ыL ?8 OV%??OoF :H@r$@ի/j5ZM'tD|(C69dqBZMګ Z PIoX ҃"D;[8Zaqd_yv tQ՜&~kL0jK?S}SW؄'́,ZIm%?b쨡JoC &&ax^FKxZ6!ΕL0ӵhQxݸMԨ YCVfi3eqϠ͂Wy`J$4vF?jݬUrv^$ {Z+Ic]s۔ʅȂ8'1Ě2-S*  3.-q@vB~M6MQL%ľgoHGŜũub XgwS'CPK/|{|G(/.bw à4mz䳐Wiy1)jy2l ]9by #ԓ'BŲ!YF{Ԗ1.Q?oېM^WCʗe ߑK`]}q dN4CWCצ:]5f4;3r:DTuRx&3;w%H!4AƬs810rc${j!Θ}ӗsʌqI `u!a7SM A]fMB {BPj`xBcM>t'Kgu&#&֙NtMt_:ҋuh{vWΧ>b+oZxӝ\X'sHkI7{muLCL.h'^TB7э$g'3Z(0z"Kƈ=& fܠ49Q{3!BP )U3ۍSGq~R0mEebI:O-8!U[î<Ւы)<OH!\ͰTl^Iڟ<abV]wi7YrTSia(w eƽ ~}$BS])ivE_wFr+qd|`tᾋjnC&/I}Wj,mcѨ\EGItI;h'4$ʟriYW/à{IP:9dRƘF,0&54x5|tmRb?6$(z2J7U/%eNĄEPIn~*Rt!~g ꘥sN Qoߊ`t3CU//=g2V:'؍%RT MHMB IEm)'>ϮKd{*"+lLFW H"EeUhO;~ҥTtZeܕ [*D*ޖcMl|yh>,"dXĀ /)S̋+ `R֐ŕGop_(9~hH"B6*8Ձ>Kc=Bi__Z|E0'x{bgmsW7w1{WQIUhxQqtyэ߾'F*:Bq%SRr %W'9=֢r]> q^v}Rִ($~C~ Җ9>( *Bs1R8@lguܡ1'd4P@Sү9OH~HDů"m#羞eF^ZhJ̎hT0,np45]0۲ICSjXZ6:xM 2SjG 7@ RnW`ca2᪌Qy}"biWyY˽<$*g!㳬:v yȦ=FrQG;@JȌ]rNM@-xȏg ؐMyh tHAt<3_| pƁ(M]HWw9gTz|y%Ba~r`s H{P+ODذ DDJZUǢ @fϺu|9JsWJ3܁56 Hz?)30{(q pWc/Iqy(EA7kj4%VrttaqGYtJ2SW3?I!F1kWIKQΒ`胈8dBڱlqiʩЄXNQ"J%YYD\l+YbUU`K:̱mF "&p#3$)ii7MjſLbi>饢ssqRn`ebrKUQ.IVYwx#9 q!+a>̢ ׇijz'&r+ eQPqz¼ŭ&"cw!XkWY%]r/SH\8XgwtyO/lQj6ƣ oyt?4E,M$Dg?ϔM>kBn7.}jY>aHn[:_gKcʚaj(giV)FBŕSx 6\lp:>x#mvF,嗅?derq;8SͿ7RP>1p +_幚Q?6 UmeaZd֔lCpPKE96f`Z"~!d (O7!yMláwyt] ٹ᷻8Ҩ6 $ͨ-{ "AD[N: Qq½6q)M~ y%RU8$}- P*LdT+s?}Ȳ1)M̚EvxÙ"xNH<7 hʾ}A8=AŚAJ,p`xrB*@Px}!Dqe kycwd}!uODM01iEޚdJu;6j~>yg`2%Sz h[#K $**;b͸<2œ.ˢIfQUKSmVyݾ`n*bzk70 [UԀގTO,;l]hy QZjdt4$bԑ(ڃ)G[V>ڟ2&;878½&6u3vG2 xTZNbUL:)tYa3@\KNEU_>fbaL1}noj ]S,;YK6q (rρKp&1I٥j8+ӸD^}o wbA+{$v>BE]1*ypb&˫6 7y$:+ ɇziNiwrd.AX4ln$ _{}-޼*`+!GQ:fbTŝr@Ij_HQǁPv5o? OwbT@`3435#FӍJqB<ҽ3ܩ?ʸQO&mQ(2ȋ0 06>uld FBE$i؀M4GPd+UDiT)Vc=]I&Wy%W :,.r(NyvU00xAEu' >s]ǤUވ]H0wJvl!*§c_}YQT]xq-Vrau ɢn1!GNNo"@Vyn5-P{%X}d'lJ*@%B"=*/m袭LK+rmp=T PjKU9+#+Zc,2Ý"D ^ >?#>βIW0B!1 'nC`DUi%8TȦ/֗B\ZMSa꣉vnC<2p|Y+C$5"C@+ٻ9c6UXt!2hΙatTI$:lY>7w7-1V/#ʹaBe,$ƱU 4j O)pD 7RiJ,?1/\7O@>n9w;ݙd.?۲CQz&ik@h?;6L:Xg-y(AɌ-_uN#Q"53^9QYO ydsLJ"9Ula}IM;ӜЗ]J`$aF͇:s/ w-8MW?y&Ν61yD6mnfCD- K͙mp/}$8$aAn~*')RrIp P6aR\-UWwvGafaL%e0JI]dfchib Yr}jCT>T~>/;ԣ. 3<*/R[iqdq я%%!yg#$*F!G.m4`MQLgRki%fDQ`ɖ65lGQh,#G7UGNf+?H%嶴&h+n+eF+"cP[{7+7\f~k "VҷԃC_;MuC{[SQ|^G5TJhO/#Vgr'NF࿫)e>ed[x\ '%t ʌ#lݶȐ6C5GC &[,|/}/G%" ŮAc9Xpܽ rlqoU3AYs?cmTs3ɿ̧ܟlQPT0AArMxaWi{ONn.I+䖑^=⠙2zQ- < laxĐjh)+Y^׀.[ԡn(.Aygh2 LIKX Ø6 *-S}C@J<@tC6Qa^ZyK#!QtL:\c ]@Lj,@=YרV>5 bZ1~Vê~XjO+yu67x=a*< \V4?9ƧO5J/=ϥfGw* _~]{Pxgj>G}rftnSއqE,1X0_uY}&'Og*ΧL|ԩ Uuź; 6%% )L5,Y,o`YI(\Aj9owܴqa ]j_k $ۈpGv[$6!+Rq,c'Ϻ.i<$_=7]\ߧƳƶMgƄ]xN2(́*=< VFxm*hB>QyD먚֖[fT[Tɀ޶`K]g??aQ%ހi3DZcW{^[>dHk/sOǞ/NV)ӳ_xˈT?Zy[PBˠARIg㒖onm\MU}sM@1$v}J=`TxLmfWP/,z3^*$V%4yF_8n"bW͠Y㉲G_WUwطj9_Tj9S|hz:tFU1⨞c \~;fbg'_ABw+T"umWkHP> jsk}"Vlɘ}~E*amoe3X}+J<qzD^XM1"_]4zqi"*m^_f;j8H>)ޛH|7ewϫf;@ KtzlThZ7eWj5װ8o o״,A60w"}M\}~,"ʙ)Vlg j4a*vɊh.tBmMXJ\KysW5:%4Tn/G;iiʿmA1akkbRQ5:ɪFzr6gkAVbv3b]'Hw()=ŗ[9;4`^5h'L'vDU! M&V0]ьk^yj )2`3V|{,0{ZFz tg6=G>zG Bl +FշX!걉6ff4}v#0"'ѕaEDRbJ@$ť:{>&Ůk9"SH[LSSG '!`P-R7zm}Ғ_>y4L+u6ہg:;TZ/.iF/818$W# fn͘!GwI>L['UAc}9{&/@y_Us J'{1"} UAyG뎷SbOGxv*7kǴO5!U'p=LВMONBBW^d3 Ѳ9l%2NòWVqgD@+6`msk["pcܤ!7e 1͊|gfǃc!\ ' b ?ONuՆ :]Vz]˂\+uAqVB Z^ [Wr/GQ7t }$Z+ 11ze݁ NFb>قk:?|AuP׻ U.Fw  ]O.7֋D e,1< HQqvp$A|#yd%2RIN9xxZpC!Or*+`z~R=؂#?)SnZw)Hm?e;|3ʱ)AK2Ȇ.TvQ@.u0h[ cxJbW ʽU*ɿ\z`ع~L}b DMc{^V7*.i.'M/ #J3A~x!Б {=OYu˫aag 2U,4i'f_ӄ1`twd zW@Z (G(Q'ѯN 3ǤHq>Qo9JsJsN ukWtG4v:%YV>jZIµK-Xmnum(o s=KSɾcz&Z!5"}ŋϪ*Ŕ1Bb뒽+omPdʁJIfwYq|cN\ӭ̿Q:"x}45L`':A}'> UWwRJf&RՅsu z WW?DNμ*-YτT~ +')=W4PҾx!?έFSK}e:!KLٮSѭ_݁k$>| I|^l6X8>$7ԃvҗ8x b2nmӇ[KUwHʠʻ1#m.11$Ӝn&Ɠ 佨!Ow(S'߯`x<9` -谭D'ugo2u]a:)S^m w,?^Ar yyB;v&i(Est/q#G eI>f z[j\!85ߔKD1O':=-\S:w'.h=c^-i"A#4L~ŏ)l`ZDRۜܺ@?xM*LP C>nC^aR  Q4~lg"D=zJ~x~*cIU$6(L[#2Nvqjmuy 8H1~pQ9ٜ$WDXgfi$ &wU_ [0D|'sY4[XfVn\Ȣ񌧲ǩqס^h&ZV) C MSm9mM1{;(.κ|M"r RwCDEn\P06-72m!Q/lQ?%ta2L>x{5p~%K{͋JZ{U!e1*"Bx]ݭo)F}bLjlD!r-J8"n̙v<)CmHK|PW3隿#J޽e=#? E_Hcẙxa mUŌ/@pIQK6&bx?Fjx\ØZFM)gu ]Ln>6I# fH<H~z@sP?N*:5z7k A|l[㞘XfY9q>W4ؾ=js^݆`AP_?ऒ<֐)|W=j]P[hNzK&0Aݐ'YXplf#WkƂWQ]oMSώZ+_6UJ<| o`*xeiNaq=2I\wgq)Mo:*LgGu. uJ;1#r>ףM,8_܏dN`k382M- *ގ$Un[k`tkiRoFBXIs&b˗9 gOUNe%i+)rȀxOP'_W9w_߻sj#o011~1 d32'Rx ֩_Fŧs43f~}wjH,: Dw: u ք$U̇5HsL.Rqe]bJ9s+e4F PnrvO^ʌu1$c ?KJ_ O$D$%WUzT=Ldwɬ_Ľ- Ȓߝ3MtTaζ#+͕dM =O\P΅U.+%XN}9ak)y{uJÜadUp㼈@b\_NcǃhT.\TWN4;*CoZ;p鱣| (o\Nse=#j֔2V̩ keBXT)~ڈ%ukS3P9MFKBܪeVlL#I «?IP'\5R EJp^QL8kIJ 0",jJ\ 2c,߱pE vB$KcBgɛ n¬hQ:\ߴA.I@sg4bi~Ͻ;P_ֽVG#7<M} ^bNV}j%g]//Rk yu`'ޤuѿ6sG^yQo@:cqu0vIA&)B4jth6(܍[32B鿀Jm<[|"lF>%^:uj!y[ ÞW)3S lA{njx%M]~YٿҵsrJO8Ytu!ɽ<ȳj32YŊ&za՛9SoԡR%QF˒l0T-jђMrGZM8*WΈ?￨>DXQ8csHʜzzN5^ZE*8z 1A|\ACf{x+80%F[wmWD aE't5^ pe ,.CE-":Ha˳`FPVٷkƙ()ӹ~e0^vm9n̥ 3x4]Ty4ޛ1:;A]_2 &DMIVTpb_9)m@ /w[:0H~P8yR'4ܐp&Cﻰzp7\'>Z*\qҋ ޛ }p2h@ SKs+L۵c_*h?ۛoUxZH(MX5Z=4IiO÷ ]'5zmȋ3/O؜-f<&o`P'XG{X:/V;6ze0np|dzV.hs* GXZV2閌mpΚJ1pI#hZܹub傷AYKJ< .Vu0RQ6,(kt$g%L`jNG/xa1qA#FvUj> y쑨ּTLp NVs<ڹf =)5DAĚ \w NFv&v :9U#$HR!3 LV,) I: :4h7â 9'O'wa& lxd<ٗ~N Jv"x$zcZ D&l98OzҮ*d+G?XYTE7w(@ sF_f *O>b& `\bLz~mP! ,G.g!A917=J6 eQлX\4'[;Ta?`03E~jL \" ӆ)8{Ff,&U ;YNUV&;d臨48QcS8(1Ul1uS`8_^UYE-9C\I_:W?c(/^1{R}%"sΗc.vRGړ;duӒ+'ava/>;˙ p!?*[J5 e .%kC?r@~x?*MճːﳰN[̦l*JYbVgi^s} )P%dق<*^ .(8SB߆Qee-{M|j~\g}w٘q"ub"j>>VA8|}^j?nQel/zd8dgC^ ZR @uh_ ƌd8>b B@Q1όjRAh7_AL$f* t|D }#R2)?_F/*cvJ"ɳ]KҌP]qnFYv*{ộVd#s&_o8*EhRAZqN^hpS̶q{ |O^e [. Ȕ#h}ɥ$oZ!:\ !rdHEqyB\ڤh}UbCG_ "qmF*7l!"4ScuFg̈1ӃID67frrD+GA`o׾43K_ap7,!g(Ne9:0P7Jj'ɞ,`n.s24$~d=@+Ы/14M3l¼΂!t&GVbfoEy0\F SDc8\:nEXngjsqouf{y\gGEzɂ>AfA)Z۟f;Vb!;U^bWU"ubz.όv;tZ6KcLJ+б.΄ā\ⓑ쇗 Yy7Ö\(R鵓$I.i6[MRf$ YfpB=CYQC|C& ב$^aJ+> gجn`4y{J]Lk y) ^RS/"ȠRM0b :[4|@hݮ'gab.KY%U5)5%=r % xkMWiXD.,@J6z~f'ܵϐyLzo"9%A_9Zܪ-Tw(EOeŒgMjkgTlIxP&Jo;-ah޵: N鱻h:}^8M =$hYwA4)-JM{\ZKe>6xzAW,wuظ1B(!\5{d@ [/MFBk&B]!x' L;zq wEJǜEno}Hf zj+}; Iًۍn5M@W[p/Y΅.h$ߜbXsřh﮼NӝRRkT΅'e){ćR!4CA57l,IF?H>״K,/8>ڤL)Ѻ[@=+hWSR-6,zz*-u b,ؿq(˞5";\-0jyQB=*Z=5pzm}AZ% ȝ|Z$uT/߷0ʟ$uz-5FqPVu%IgHE5=N^f;k*I=Kv|8ZIN:`xDt{[( ,PCQeUIYb.W94Htl*Sn<3߇<#[ S Y"{2++. (V~֣ሴq7# z\ȩGΧ 78F_ =.&dP‡{Oך[.x&6{)?ؼTW0Vl0Uq;Ǵ;mq"HE|\>?OG f~ Բ 1gofUh(< 6Š(ߋhXqͬAU5LobI9H{STԨIð/bʠC_BADN!d ǵjV Q'FL -WͿIޓyѦtV0HE.JLf587S)wjЭmz}P~K AdI x$ \ȌhVo*ɟCkoyO3X%ʷ0衖ʝ@ |mdZ@@bu-0=fx姵Md :uY!5#*ծp]Wz7F߁\ Xzl gxT+ŒyGD_:Q@\Kgɥ#I]Ra//뤉`s~!r,5񚂓!6F3_ͣ\bWx|nU{j쇌"ǥk&jb7~᫦&{wAy9_jBRǚ90ԓZy8)1jZZʉэ8" Hk/|-$8InnEViם>XF2gLrq̔ ChcHH)[f7T ai [8!" \(&"3g !6kFys xVvG#Ĝm?kӉ+Auʟ}YeQќrcླྀ|o'/W6َ~7XF>X^7cov 9S3;kuJV-@:x1t\I Z&kn#Ñ j=y49h@a^թ^m-TYj.g_1![4ؿ2I $㈎d]u)r8[ ]cI;}zVj)<.XbZqaw|^Fg^l%cD{rJV&%N:Q)^TP+Zrk bDy,UziW.4X<3‡" oIm M<: Y%`vWkoӋ`=Hi$ jv7f.hAi85# ~i4u@mPhtǷ;0 sg1O { 03ΗE2%)zN#rj)aMpz5S{TNEt;ܞ)2} ڤ#b)<*H&!]b{ r{R/QvI(SW~=k rx 'r v06 P@z). nͬq;\pLRd~rZ9/SG@Kt FqhTSa*v>-V"3lƒLt,sej)`x@n'_mj ]C2Hg6N4((@_rҶ s#7wC6bNQ-/@{?sˈh<*vC:Q?-"UOgI qO:X(Nm ژ*~b|OC\pڼ*v#af=/Z+ÌmDuUSn`ldͱߪL泳 rTɝp:"MKGop}h:79qdjONͫ*C8氇4_v6cͧAoe)0kyI[:᭜=K_JaG|?y@ Hb}q[gW| k.al8 " laR]5ӭg"xBSSv#D v?I܃>kX9?yoCw}gdpC|7i箹+P6jm)@Bl=6xW]SZ7NiR!?~CﲏNQ7oªi]z,ٍxj"BkWݐYҊ*IDd"GL&hxx[-vV$pvihH+Aƌ]{as0w?-W0)t W>O[shi3WJP4?J{5iw{ޜ/2'gvaBZ}aRImkl3V~|Tp2;:x|9_gZq>[T\\Ɓ~% s*3 V2ʠNiS}.dD,^x9]|:UqyhfZ3-?4hw|vNmۋUMW}R˺Mnwq4CtDD?_K—U$D>gs0wzg&ѝQ9OG)vR{.ˉ\+GܨyrhďgR֝x6abh$/І͓%-$ 1sO Qs~N Z֧ТbyVULB*;$7?< D WV:Z!#%.T=% lxF{>-' z u{'(Kuhqu^+hK">K_dYςj^6q"zrbu7Z b{c\w6uxi@ : O,/{^!Z$ Jxjb39Ω̨wnjb,wjq"(M<Тg}$fxu 3gL %*bxXK2LvpbG4lc||QUQc_4ǤN<1Oz0"Ƙ^) `>|.x(156Smnp?3|SO!?;']<:JS:@(,\ڧByhqwϯilK¬N@8'T (P`)XeْJyXZm[i7PϠӕ_}h[~K A+H#DL^8c؉鞝/XIޚFVO{Q GZt=ih!A.uTmK>ΐ|# >#ǦֳEJ⎑z6_n7r8^UYl 1]CKu,'ZmmlS'=O=Asp|cX<<=S 5Bjp)e{蔞0&r#ԃ1nf8:wk69I2Fi f =,O7WMd:F'[:Jq'5v-nrknzu9M^R͗‹%2AZ) YsX Ch#1+#z:mC/WE-܄n_}=]DGaĤ%vXd>XB,zHGHO8M VyCx櫱oq5V_^XCoza|*$N5߱'g6|E:˵3EP_Ax̪k^tgqslrzQ'Q⋙HfAfo-reFtwlX >KR+ZxM+$štm PWֲ 2 psFҢppśd;4+xq̐w xu™7Nt𘆅P1,8zAx(03? (pWNt 6!1@< b,F)ZpxÑ1h}~ xz3$Χ'9Y!N/ c!C 2%Qg4N)dXs)d%5feTg j'py}1pD2+V˘ċʗ4DY| aԆ& mnB>f}$9qȆ̌qaoFT̃j\td[y[1c.}cf]QXX:#YS  ::px~- wUɛ8Oͳne1&S{,C:<ƈ030m ^݊5fsxڻDPJK`j=+MR9xy(!YY̝%DŽNmLL!f-d-@=/QfQI?2,t:et<$bev2 Y.YQJB v^@d*q*1j /^]{-f›9K~Ύ?BF{[тYH;_mG8Z,#ZŸQoEDce%T}3)9aҙg#,>im5*PW,gDjy,Xu:4?!8QPKQ?+I\*R68SAG۴7ut*{8 ޱs l~Lfl:k*6KT`@*b'w.'!B^Z+OXJ]5oNzqz5ӡ>GVnYvH2 (d/`A]J&T/2v}X6"CCh E%>BU /AZ: a\E.C.FEEybڸ*@Ӆֈ#YKNA<ᦥU13vMñ7!ѹ -ra4e> "Or%r6m I6J+Ǒ9skV堍Tr@NT'"T\l 'X[з+9vl͏7|2Ovלb'+1)G$.Ϭgz9)Wr-w%nj 3P2bvP4-ޒfC>~C0f{=cØ3+-2a.d5<(4dqOtxP̛:@a~ǸTo%5Tlh+`֜@,I QF\΍UZ(4˱KDbCÝhXQKTT8^`|.Qde }%'"l@"=p8=Y;Y~= 1 Ƨj|pdŸߣM P,[h?[3d#Ez+g *55{^d#4j"?^Zaxa񷔾"m/3I6d}sok d@{2Ku {PMK&}(}8bJct@/-k9jl605g\ vdJa5HzbtNc3 Dk~hd>曹D$ 7Mv^\6 IGQ>g}gte~<󢳈itV$RBm#ؗeY؃}ЕIU2,NE~Y$˴ȳBڵZTAĂo69K<`q 8jZ 8pOy;9ۯ1Y79ЌNz_G)snժ5+3](,;P m/+)LY/` /T Ѳ2]éB<$3f/>%8ÄZ_xih=#$AVS/^E-?0d|iU9zX&м5IDhTfcf 462ROK̆2ku $Fv[W+.YL1P@ZR)S7Dz1H[}de4#sr[u:Q_%kz%c|ninL@U(*dOwz xXfiS`AԼ-bjYxDx4jG#<`Qw}v 3xfr~itN242&%VnZaHk *Dޫ޻d.} U#_}h"`i8W% ވF5cL׆zf͝Cz_X4 ae%R. Wyjݹ7GVӧ?^] 3DpkY6~LFyF;6d2~g8d0E0 qߙs1.pk p UY!Ezw>c6ITuG 2`*\elL ?QuDT`/ߣ) NH?Vq'BZwWw r˼>֘iWҡm}xIֺm[=I.pFEGѭ AveSqYрnbj2pɾ5 'qJqɑ0IGa"R;ѣ Aj MťS}mKtv*  g>$EdP?G-%0_T>tiը^UV̛$Tss"T;KIEoy^YQd$[W˔os.C7N2CfPf#I_YO$ǰzQ0/YBUgNb"\P*װeG'ff4Wݺ}Rk2aCUet1_KZ=6!hX!PA+9i"Y:G1_BE9 ?H_bi(ZiER~*uM%Z{:@-.i$uFX:R }:l}bƚawrG~WL: |)zbɢ4h9 TXWD#iwՑ[>kFQYҳ'GV;e,+~ P4„ Cd-Ϳw 2m2s?wLç&;c᫙#5lUs ±; 2uazƠ+7=;չfPy:_ΦO4>#٪$5>KǍibNӴBQFGO kGڌ$D?˙Tq%EoJ_p~3- NY{`dw.B<Fy? =1sj)5h G1se6bn٦е a3775!Ȼ$U¦v%ӂd! ,^hh}_ ƬsH̪Q:[uPg4&Iz6(I0H0b p<8Q+X=~=zG#Va̷rVA0^hvE\+ceF`g0sƴN!L& 2~rfuWdI*KnQXK,|^۩ Ԃ}k(CE sR 8@pUC+(]<Hެ$>Zc\QMfҍhjҜ b"%sޗNy(g 1Iy/Tp8'-`٫:2x{ɾNQGRς]?3,ggaYgYd-X Kآ=ϭhisNw6N+W+?w)&le̺1Zn3jyqLLwhk9q?MfM2e9T:+2,ȭ({c$ y)!+3t]/w16Q?p>&'h$80eٞ#~.QKM\b-RҬg?vƖ.i?$W_%8hnt쌊pzzm?)S^z_\9mHLV3NlP("EkSs FpK7nIvgAC09 4meThQ+uT^;8fOyx->%`x!K 6#kNqGn; Eo=ԩWrFB@e|{2 ^ <3IenP'H6? %J_UޕU%l`q2gF!:@Qj"W2G!x HQ0 ^N?J%(#BJŏ;`Nٹe\@"8!b Ta0R2p.vno;% ҙK ㊶a\ AaL|X{|#)zA=v~}ol LK0fymigJ|8XR%.JBNq6f3t:({pJPiOۨ-;@gy^ zݹw[!Ab :bd3 ѺJG %J(7CmHOimw$^B~70^[1)fh񝅊hI D;V1l(Tڊ7Q11;h$Leѓ"_U7W}E/RE.qH let>(" pvH6jh&nqWf>)e`% Y`TrG}Wqs>8AZD]t%3ARDaU܉.*[mDSWqX`ZO杢P}: +xMu G53e\;8Ï)u㑗Uv{t:~.>[lS֮YmwNeiUZ2i+.8oojہ9 D!QapR O4sr7 fٷäQ k.ӹ.ѯ߶P||\|b]X73H0xz z7ZS{͊s5Xd1ui+~ Iބ?7@ެKWBGLHo2el_~&bgu $,X$ ;3ݙ"u/_jfGe6VҶ[VVFG|R)*?~GϠ@)̦-N9E?d$pcQ=tK1Atƅv/p H!&6xv 'u`bw/rdHZ8Y8hpx$sUWߢάmO+3\p+%DI2R5sie7Y 0r?l"KB<BN3EDɢ@lf9tHp!mFL 2TH6wgrA{9){;, E9ץE= iLPL~Dz {9]w<1!PfCS^ _糄ȆBCc }W 9;*x]9b7=b,z˭ugޙ7X]U/^tDyBWJ8u{aJow]mAkryO[+^  sOٟٶ#(r ?CSu>'b34TK5pFqB̝Ng_dTmLiXYV1<ĵ䷉cL M#G!ڦGUЄ+h6@p 6nIB?nJ4V6$G${@rrWWsy!1!M%>noiQ _42/>?0EAwָ[;t|ۘn vWʠA_}΋zeChC`*b Z0Ʌ?-IHlfkغcv^BTBߏ6GFXx9-#~a*#fDZ<@ 7Ao=V>?{me/>H9P$sjMHRm{SMVqIbWrVfrAL:<Y*n*#Պkݞ]j[{&G@. \b6e_oJZ㎳,#m[!V4=;o8KuQ)So˞kz&!WEfQ`=L5T'O6M:9&j$I Hv ,f2'jzTlM0#P \1y>/)jE6X svC$rAAc(~JHe -*U mI"gs1PT yN}hX1U/C' 1_h42Q lK=$E.-DpaKs팡e_y\)߯yNۍ 4ns"<VNeǽ7:au@W2ho>}tEɃG\m}hÈfGZz }_KdX6R7NjSd}z9 @"m L/1"10N&8Ü9l@-7ָ/Ols Y%.jCx6+Ɏ0U]0|1ܤi 9FmH/mjMlu&͏_)ܿDXD.M6)60&2|:pG]O?$:XdzMs=z)#J_nza5Ct؛Λ۴t-Dݏ [8FcvȎm^6(JlڑY<z߭mA]MP({]5er R,(*VlzaBL;=aSH<WB:<u>`cJpDk0€*;0DŽ9t!Q],0ix{=t@j\ !ZRߗ~_T^j7Jk'-x⪌9T5̘C3TRQ45q6~cYQ=ĒXYk|q]ԦI3Єx0h B%ٗUQ(]Qbi s$jG_] x [>?9+v_Fcэ41#7JF\ȻW2֌a1U\ Xtrɰ! ^K!g|}%4?,[FW_NE滪t G\4A3ex/|= dteƟb F>G:jOTSv18mg` *$[ɦgF5{Qd1i]lƛ9dɒGDP##a]5)K6:-$dFQ7 Mf6p D }n Rwڰ0R$E{T5S־Rcб#uz-cDc8@쓛Y6K5Yr|sr}Ti0Io-䉦ZNn$cGUlU=[tw%\8ΑN\jP@wdzSD5LW}{Cy )!cUU>o0dIb أYE+ *TEN%*:nl9^|ϡeCnP~o>8ՓdP{s2<z$1$K 8r5zWBtO7P"102;,$MF 95ՉYu`ی!RD\+-p>$$#!dcR6O Yalw*?-^_q_RIAs$͡t߬u,V5C<_ dlfiy|Qz;?/E\]H*$kaD >S`5h H F 2R)LA t`-%a ]gIJo,}<80"r-Xj#z%{0,&>am(ihoŵL rJZ!QMڢyښ*[#{+饰+֥*&gP;mF)JZ ۸%q\B3iY0 4.[́`ajۼ_lH;QQ/swP0wLZvx"TQfQ]9ArCSP'a,a`3G lCe9v1oY8%epYc04щq._Nh咭F|Kҗ1#ss#`m aC].Gɢᘁ@`b~ ";#>[ {'֢Z+9kv=PP)jtn ;T0YB4GgܡsY~LxR_# uoSSSʷJ+ta<0L@b]ٟN<4ԫv֒mF  eZH EE\ZD5V8 ].a֩d" +F'gA]r?xkk FuPpPrcEsw)a1|G#9 VќӅg$Ijq V'5rrEfNwpfK8 {<}h\SڎPPqCϼYj&ALp8 JGV p?Ӳ٨3gIk|Rƒ'V_%ep 5 qB| 56SO0jM9Ef%,92 1-䯗S1Ekcq v ~V~rfv [ @Cß:Ω-\2e)G66K֑/543)Z \ߋJtٸYNNvÎi8UN$#惥|C.?6mՂVQ\(]nzqTTH:ũ >7zmv \9U{ze2|˔qM\m!S㎹TJ{Sjga̅l K淠7n@).Cm[1dyN9PX]Tؘ ʏň; ɹec:-P486+w-Nh''/Z#5 qyz[;?.ö)EK㇓w_$RsOwxv_ !+Hm y~1?>m4KDv'K8ȼe{0b}NbÑaz@ 엏8(οV#4*axu\'x'yS\Y˫Ȉ;,ĊM4u-+djsЌ soϖ'T."62|uqC/oNB%k`!~*R ŭVHRD+x [ŞyRef#`I <2D:x`GZ=ւޣf+{sUwjQ?`3A QƂe}4u{R@'%Ae{[|y[S(7N+Gm1 v""=\ <.XpLp_O8)eo9ƓUz)J'$:m+ n,t41x!;pF*<#~x8y~*H*,zH9lIP!e_MQﴊNqmD1.Es=T4Lۛ<]Mƍֆ8Pe_~J^f;KeJK:'+lDzi 3I7W8@KεJ<йHxh`2Qy?=AWtSm 1O$XCWq .gY,Ӹ"˒н@.Ҝ*}UzOG5,]AAN p@ mj ';9ͅAٔ>,NGk\ `-7 ,\s%F9V Ѯ8W&o Yq݈ yH 'tC#}5qI֝7k^czA.r+5OLZ49wؽF-իF-RK羗AN7Kb/^Pb8)4rO:l49I.']nXX6!'TeߗŢ|mSuđ E)n*_UTF~+k~nl.L}3B'9. Nk92f 6-Re⿮2DŽmց:Z,-EZ/9ycѕEЧl tU#]Z72~\Y 0\@[ƆFn+Cu=j]UᎉD<"_Gl#0h-:݂Z R3FD^yH]_)_m*n+I;^c׫J&swE #Ϧdֲ d!X=潮(5D(oa A9K8. \P1m[o'腚F}wFuuNN'CAux\/SdL%M꧛f8zh͵+0KYx ƘG?N^ Q7!p٭cwԩF^plA.&}M?qy| 1ĔmndG `b]d݀ T0ZMYƷPDHmlҽ3f:s3T驵ѹ " _|~є*lm5ʂ߰`G<CU<. WwYLuo73{t L#\M4GzbXe@%ɪwG=j$~#K̜-G0-S, 1Oan}k3\||Z@W#iJaXW_qWDKɗ,R7E({p^_7zol=k41zM9&+x2{{XP%<=}R>%]fg4NSA~JYݣ @umu4 wsM?囮Z7e vޑӈǴ ]# {a 48vbuZ~EhZx" &ʴ- bOolX*jx!ۅ :۷Y# jDK^DŽf8`֠ňKrf\q OXk2B#6f?{S:#2Ïm!"~Z zMdIwmm}Vc¡e?o_4/un$/"g3$.'?:`&M!Lh>GUwj:a:Ece$x_sܑ&(Ui4 lWMG#"[ns=eN/j>T2񴸉:DR3}RzM$0 |P͜>+xzn^߻;V=|ωK`~i^bnvQR:Q6nnE-޷kGwvA_ }]FX0t9czV 5ŏ-YI#Mi)O~^3J eW`nS"܏/ `ޥf~k_]UUbBm41&rRNxe\ @F} }ZÍ'H!.i N )++kO~튾*废dy|t<7- j"'$wk 9e$f'<+0?%dg XEVR$&~}㉽-=).k+l=o]۲0NW4)A¥.a=b&X@R{@S[z%^QGtF7EP} Ĺ2?~Cq6"Azd~H H5HdC[MRk ΅lM1 ;6X_hW.T`o=lCz*SY{eOK:GD#'0u$͡5xkbX!4kB9< ܦMuu !Nv]y^Y VVP/<ۈh%G_7raM _)Ox(pw0wVQH'qIUC3$Q77l?}_'ƝS_}3CUtߨ9cԵ۬'Vnz2=إͅ RIF=v_ C2A:*)1Nn q s5Q?".K*}]Ka1x\J՘3RVp.Oeߕ$2'##~v*EQMS)Q_#J1!`7w:%Th-H[#,r bCX(mvXu(Њ*gpl]d̄ %5?x"ny=d#(I>*҂>;d%Bsa4{%]XHq5g+AՓ|Y•gMmKꬿ~ZH0І5Ϧ0W}]yS<<7P1= HR: @5ѤjQa6?ٴ_sRz\gC|A6zKGvgzlaa\o'/Yx1Ys<_thf~eDi(kYк=ѸwLv(]R2&R<%dMB]wş锛q@7( lIt,[ߛQEdƟ9|ܙ?I.BP(LrP1.ɐɪM}H9' &ɣu|7ʢsa {col P]B 6{mu Z]\2öO\TT|\ljwa-RcʾH+x *S[% p(rWI=;GÚUxaRn1I-,_Nb%ߑfKԇ,›fgI2~nK>*wFJ F>%ŵ.X+V'aKE=:2WBڍ_\?' ;-=9_Q_}piO.7xλlနe{fꢆ̱-So˽&ڤ!e^!-ψO?Tx2}:+$Su9Z/vFLʉ,ڏ Iz^swCj*4*7nVf t43򢁚x}cB!ER>&TVjCC&(\V:I3{WBMdīr ;cr ka9ݺrpoN_+tיpaJ~ }ȾOly?fxprҡT>8~B_5TbUK"c!]s z/-Yv!i^nj:Ol4Kn) FTx3eᶄ]qɯPcYm6Uw6"ҟ-&&GPE 嶱X/*gp2No(12ΎP{dD=w8vL2|\UG@G_dB0n3G5$+~aAm(Rr/^#S+p%[;K钺Ѿ\&vH6H B+KT̈́ -P/>R㠲j&(/9W*$ |@iVx9a/Irڏȍ)WoY1'HVK1s{Z l>eJ'K9c;KYssM|TnDQ<X^v{ %wP((P M]:CwIc[C ړ̠.Y5^4[ڳ1uVAsD8!:"Gחe3̲ j[`FoGhPoePV催0}M4QB fwf=6U#qV2lK{[!}5snS H(ϙݻAR[yLX##ߓ˳k[ϡ\,48 vvhE䖝,ZzQRn}WD7AН~t;sCIx{́^| "5|7x^E3[ˡGj9!;<+^" .Eť4} 8^@Cm%#d29I4 (ځyʑP Jn9; Kmє!`MKWG!GnR:,wo2J6kGU`H뗤T*0y&p)C<*ޓ jS6rݥQɓ'IZЁVz%U1<.K&a]mZd` >"%ܟ7#Yp=PJEx{e |OgLJOfbխh`%`aSoy 9oi![J%QN27}Y"qXvgM (XB*a+?r2k[z\i{G;eDIsN,=d83\>c\`;>QX(8u/<Ҋ<]`?/'OCNYDf_ C-BË^lPgʶ$ j~Q<8[{1+<8 aU]^)UIN;g 23NI7sJ[~CG~½n&dHo_teks/Rv̋6zjt#9\M4f(2*YFF;8)%¼ǧ^d!qN-rʞ($d&y+TV Ea&;<"+,aBv%/}ӆVBT_y Ʉ6FԆ@k}Sw.:NUzT ErN7-~PFݕ70Rr멐ZH^!&mAshj 5n' kKQ X$Ō=Ⱇ߽/#RJubKF<8~sWOTw1"7$U5z{ s2zuFo/Q؁zsVCЫ*' ٤KfOF}E~g3pA3]d {f;Ϭ]cqM.U %/ES1mCuCY#2Wm#l M ַ!ue WAn3A:s#ؼ !jуi; ;'K0G60ZW7ta[+ >߁N{;|v&Ldd^&ЮðHF7:kSHrM31)OoԼ0))0uW670`iWQizV?9 &O/UN "}akT@V)rjy !7P VզGxZ?쩖>ϳî*$o\vy5m9'I?r:yjj0VYHfD꿆C.iuWLxe@|[>2)ɞרE?2^9\xT Ջ19sP]>}gֶLEhC:' COɚk @ҩ,6`a{LBZWT %[_F|o&OL-+ *ў@jR56C,1cHi\y zL)B]" FێhԅfM54⊮̌.ȭ=z@:4AL]^bB V;8Ȏa@ iE{,:\^0t:w':z;LrS{gzKXj}(?vo5,rB "1~YGK)b5>a*1gw1ܘ="Ģ_ti sJVJU-_J#\@0Ұx/uB 'Y:R=&JLu c7%vK5ʺv,t~C&ykW$/w3 aSv}nW&5c 4ZT߸y_!=jst'T{+m#O:講\ zIK)a7'2RS CϤ+i8&se3M\dhm!ZF,F%lƩfRӮ3q,V5;)u< s 'JDPѠ|aqNVa0(mv ~vfs.c:׻K[A-6;.YYݑнyHKtwLBQHvb5_xQ:>DE[K#.o?S7]N2T"6)!ѯ-'E|'n U#(l/hpX`ZQfP+m )ۈXgqǎ27M]3 G.#aRxd?eY]u"vWsQ)ۉm9An PBgM =z _33<;hb]Cو.W:)jguLnwxHۑ6%Suhl&%*E}!KbZt{__K4͍]Ѐ3Ыh`4>0\86ERA۪I , ,9 {|Y%*|H(u ~PS *8ƣDyv9Ջ֐EqD0;ftr-@%.<$*= XMq;k88uĠO/ȇ>] iW꓀QG(1LF{cĈ֨:lAFγUE95C @;\`Rac ZP;+ ?JJsOWt((A8v&P# tM:e|ĭרq]&8,+%hRoc]Rӫ*j88ʔs4q'6YLҸ,c|;B!yڥz gF͕y4|'n0p!ADJPWS,OWB ^CaJvpպO1!rd˭Seq|56ݧo8BGӾ@|{'XG P<z!2IYWa-=Kn0AXaDAR%RHPļx,dz3nԾJ̇quhi0C}z(ij$u6#DRO9O5ՍoY = xjGEC@OBuaFh ªNɸP,z2ѮWiDxn?pIG\`[4rR gm-6"ah#b%^4>,#1´`Trdaxz!ȁ{ϒGkiӡ3Ru15}=2#ԣj*4K,YK:ʉxJm ChW%LޱK#f0о&4+q7GmI@kFiZ-5t҅gf!q`K> lXBF0%C%%?6#͝*3S|k"D9e,N }Y܂HZ˽x"XQë+`:87s$Gx*=EornJ5C\"":nVC3!2,_t2gy\ 勊qﰓhO[ͭG4>hNPyϺo&a_3sȁrX; *Ƚ̲u# Ԝ(Ϋ9k@u -1rftΑj_e1͝]hʵh%mH1e_O h1.FPHOTPx,E?^jji.r>3FxJq+2xF[ZQ|F/?RPt4i`9.kYet׵DZ*o ? 9Fhu#nozHwp@#w/#K3̝VN\&h°x=*zTոĿxY3xU |prIMm}l(*ۈvU@;5E9wɌbVN"\ j筄?e\QTpDeAJ / i,:1E3 1 31js [9{.XD)]l$"sݞ@H|GRK*.Gp3dȡ`J+6C'VOIh9USUQ Jiv)6/ ;'% ]-tFxvq!''è:7Mw1U9 XoP8$,rT{,h[TsIKy%`D- PߐA^XhјB}ڶ@\"?@W:`=nɱMWЍDջG†q1im9R;B.q⌖Cvl7`HFoKQ&gҶ+eq=\J)#TMa5Ş׶ މriUqUh=mFgC3޳5I#|1%,/O3Gl .Q0QR|cc(yNCM:Jna}D^7S arMXO54ZT)RL^GN!Xo{TpqOsE(|L}*t+ϩ?u hѨ>ӖGTG̠xM 3[ 1E R5 ?( [BOaI-AIw.SJ8&pdrwD UR ;kw X@t0kkp]cX'aswbuPߔ7,"r͜/b1}&)DkfKMqebD,Q ) -_>e{// t0 =]hfo4C!!i-H򵗞Ks f YZ